if https://en.wikipedia.org/wiki/OpenEMR can be hipaa compliant, so can other softwares be. i don't think being on github is some sort of "childish" thing to say.

you said your clients were lawyers. my question, how "big" were your clients? were they shoe string budgeted legal clinics, one man pratices or medium/large multi corps?

compliance and liability is talked about stuff which is usually customer facing, has some cloud version that might be stealing data and all that. There is little problems in running offline self hosted solutions that only reside in the local network and "for your eyes only" end to end.