Thanks for the reply. :) Here's some more background info. Yes, the data is health data that should be protected. In this case, the vendor provides a service that requires them to have access to at least some of the health data. I have mixed feelings about that, as well, because of how...