In such cases, you can ask your patient to sign a request for non-secure email communication. This document will point out, in written form, all the risks and repercussions of using an email provider that is non-HIPAA-compliant.