Their site doesn't ask for any data except your zip code then forwards you on. Where does HIPA come into play?