HIPAA's Security rule will absolutely apply to Apple when Epic, Mayo or Cigna start to push PHI to HealthKit for consumer use. At that point (which won't likely happen for some time), Apple would need to sign a Business Associate Agreement (BAA) with Epic, Mayo or Cigna, but not with consumers. read more
App Development with Apple’s HealthKit May Require HIPAA Compliance 21 Jul 2014 At the Apple Worldwide Developers Conference in 2014, Apple unveiled Health, an iOS8 application designed to create a data collection point for third-party accessories. read more