Justin, dealing with HIPAA can be daunting, especially when it's not your primary function in terms of dealing with security and compliance issues that are constantly changing. There are a few companies that can help ensure your app is HIPAA compliant. There are also hosting providers like Firehost that offer HIPAA compliance ready hosting that may help as well. http://www.firehost.com/secure-hosting/hipaa