This white paper demystifies the new attack surface created by a new economy of telemedicine mobile apps that highlights a systemic lack of hardening of apps responsible for the transmission, processing, and storage of our protected healthcare information in this new API economy.