HIPAA compliant Wufoo. I've got a lot of medical clients who want to have patients filling out input forms before they arrive, but storing medical data is something I won't touch with a ten foot poll.
We use and recommend Wufoo anywhere we can. If I never have to code another form it'll be too soon.
I think it would also be necessary to leave the customer with written procedures for managing server access.
Clearly this is very involved and not scaleable, but if anyone here is considering setting up intake forms for a medical office, take a look at OpenEMR, they just received modular ONC certification, and are soon to get complete EHR certification [1].
There was some really horrific things in there - this was before I knew what a JOIN was, so I'm glad some of my shame is long gone.
Still, it's awesome to see that the project is still alive.