This could open up the entire health records market in the US - a ripe market for disruption currently. TrueVault has a HIPAA compliant API, worth taking a look. I've done a lot of digging on this so feel free to reach out for more ideas.