Serving - We leave the decisions on serving the app up to you. We serve our apps from Amazon Web Services but plenty of others are great too. When modifying these two processes and others you should follow procedures to meet HIPAA compliance. Although data shared directly by users with applications is not covered under HIPAA, HIPAA is basically the minimum bar to meet for security and backup of patient data. We would not feel comfortable if we released an app without addressing it.