Only covered entities are bound by HIPAA: https://www.hhs.gov/hipaa/for-professionals/covered-entities...
Notably:
> [a bunch of providers] ...but only if they transmit any information in an electronic form in connection with a transaction for which HHS has adopted a standard.
If you don't process a specific type of transaction, no HIPAA requirements.