HIPAA compliance with this product appears possible?: Yes.
Recommend for your HIPAA risk management needs?: Yes. If you're a solo/solo+ provider (meaning there is only one clinician/HIPAA covered entity within your organization) -- then the "base" plan should be sufficient for your HIPAA security needs. If you're a group practice, then you should obtain the "plus" or "reach" option in order to have the chat auditing feature. If you wish to have both conventional SMS and secure messaging, you need OhMD's "reach" tier.
Caveats: 0, Notes: 2. See the relevant product characteristics and full review→