HIPAA lets providers text patients, but is it secure?