There's a relatively new iPad app out called Insight Notes (www.insightnotes.com) that addresses this issue. It might be worth a look. It doesn't have nearly the bells and whistles that Evernote has (what app does?), but it appears to have been designed for exactly the purpose you are describing. My understanding is that box.com is *potentially* HIPAA compliant, but they will only sign a Business Associates agreement (which is required for covered entities) if you have purchased one of their priciest plans. At least, that's what box.com told me on the phone.