Comment by nkozyra
While I agree that they probably aren't, their intended customer base is.
And even so, nothing precludes people from pursuing civil damages if there's a data breach - this is far more likely with sensitive data coming from a medical provider to a third party.
And as has been hinted at, the lack of professional presentation is going to hurt a lot, and people will immediately ask "can I trust this platform with any of my information?"
Probably not even a data breach. A user's friend/relative who is a lawyer or works in health care or know someone who does will see the app and inmediately begin proceedings for a lawsuit. Once it is under the eye of the state, OP will be in big legal trouble. Building apps is cool but any app that uses critical stuff like real world infrastructure or personal data needs careful treading