Third-party health apps can help patients manage chronic diseases, log vital signs, and take charge of their health. But these apps often fall outside of HIPAA's purview, leaving them in a regulatory gray area. Tina Grande, executive vice president for policy at the Healthcare Leadership Council and chair of the Confidentiality Coalition, Robert Tennant, vice president of federal affairs at the WEDI, and Marilyn Zigmund Luke, vice president at AHIP, discuss third-party health app privacy and security risks.