I think it's a great idea. Medical records are traditionally a black hole where you don't really know who has them, or how to go about reviewing them. You'd think records of such a personal nature would be securely in the possession of the individual, and up to them to decide who gets access to them.  

 Facts. Medical records should be held by the patient. 

 Make it even better than HIPPA compliant. 

 Is it possible to contribute? I work in the behavioral health space which has additional considerations.