Looks great, Patrick. I just showed this to my boss, who was immediately interested.
One small nit: http://www.appointmentreminder.org/pricing says 'HIPPA compliance guaranteed'. It's 'HIPAA'.
One small nit: http://www.appointmentreminder.org/pricing says 'HIPPA compliance guaranteed'. It's 'HIPAA'.
It means that, if you don't see a check in that column, you're on notice that HIPAA compliance is not guaranteed. (Looking at my competitors shows that some invest a lot of effort into HIPAA compliance and some insist that it is out of scope for simple appointment reminders. My approach is a little different: I'll deal with the lawyers and regulatory angle, but not right now.)
If in spite of the plain language of the table and eventual language in the TOS folks insist on putting sensitive information on a service which is not rated for sensitive information, I'll say the same thing Gmail or Facebook would: I had no idea they were doing that, did not encourage it, and if you want to sue someone please sue them.
Reading over your response again it seems like you're saying that you're not doing anything to ensure HIPAA compliance and possibly that the HIPAA compliant premium option is only there to contrast with the other account types.
Is that right? If that's the case, why not just cover this in the TOS or with an on-page note like "NB: AppointmentReminder is not currently appropriate for HIPAA sensitive information." (Or some rephrasing of that that makes more sense.)
I'm confused why you're listing an account type you're not really willing to sell, or if you're intending to sell it, I'm curious what you intend to do to ensure compliance.
Of course, if you're not comfortable disclosing your plans here, or if you haven't yet figured them out, by all means disregard this question. I don't have any skin in this, I'm just curious.