For this, you need to check the app for compliance with HIPAA or similar regulations. Use strong encryption for transmitting data.
Create multi-factor authentication for users. Test the app for vulnerabilities. Request long-term support from your development partner.