It can be if the device collects, stores, or transmits PHI (for example, glucose levels associated with a specific person) to a Covered Entity or Business Associate organization. More medical devices, wearables, and IoT devices include built-in microprocessors and WiFi/Bluetooth, allowing them to store PHI data and transmit it to the cloud, where any healthcare entity can access it.