Reading over your response again it seems like you're saying that you're not doing anything to ensure HIPAA compliance and possibly that the HIPAA compliant premium option is only there to contrast with the other account types.
Is that right? If that's the case, why not just cover this in the TOS or with an on-page note like "NB: AppointmentReminder is not currently appropriate for HIPAA sensitive information." (Or some rephrasing of that that makes more sense.)
I'm confused why you're listing an account type you're not really willing to sell, or if you're intending to sell it, I'm curious what you intend to do to ensure compliance.
Of course, if you're not comfortable disclosing your plans here, or if you haven't yet figured them out, by all means disregard this question. I don't have any skin in this, I'm just curious.
Reading over your response again it seems like you're saying that you're not doing anything to ensure HIPAA compliance and possibly that the HIPAA compliant premium option is only there to contrast with the other account types.
Is that right? If that's the case, why not just cover this in the TOS or with an on-page note like "NB: AppointmentReminder is not currently appropriate for HIPAA sensitive information." (Or some rephrasing of that that makes more sense.)
I'm confused why you're listing an account type you're not really willing to sell, or if you're intending to sell it, I'm curious what you intend to do to ensure compliance.
Of course, if you're not comfortable disclosing your plans here, or if you haven't yet figured them out, by all means disregard this question. I don't have any skin in this, I'm just curious.