Acutally, Box will offer some protection. Box will sign a Business Associate Agreement (BAA), asserting that they provide HIPAA-complaint security for stored data.

At present, Dropbox does not offer such an agreement.