I believe that patient information even at the Physical Therapist levels require HIPAA compliancy. I'd speak to a lawyer before you start having people use this, so that you are not liable.
thanks for the heads-up for the US, patient data is regulated under the Data Protection Act and ICO in UK (and a few other Health related acts about releasing the information). I will consult a lawyer about the EU and International implications.