We take responsibility in keeping our system HIPAA/HITECH compliant so you can communicate with patients and collect their information without having to worry.  We make sure we keep an audit log and use high-level encryption on patient documents.  Security is very important to us and we run integrity checks to ensure that we are always up to date.