HIPAA compliance for scheduling isn't as scary as people make it sound. Here's the practical breakdown.