I should have clarified/furthered my thoughts - and it's true you shouldn't by default trust a startup to do things safely or ethically, you should certainly do your due diligence that they aren't making claims that can't be backed up, nor are following processes (etc) that can do more than what is a pre-existing level of acceptable risk/harm.

Presumably however, if they're/a startup is expecting to survive in the long-term they'd need to be leveraged and connected with safety and people with the appropriate knowledge, because they should be scrutinized more thoroughly if they're involved with health. Otherwise they're going to die off - and hopefully without hurting too many people or getting too big, like where we could reference Theranos.