HIPAA applies to covered entities, like health care providers that conduct electronic transactions — not the vast majority of apps that track periods and pregnancy.