I think you would just have HIPAA laws for protecting patient data (in the US) to deal with. Since you aren't making an actual decision on someone's care, I don't think the FDA would really care.