HIPAA generally allows patients to obtain a copy of their own data that is maintained in a designated record set, while mobile applications add a layer of legal complexity.