>but good luck getting past the EHR vendor guard dogs to even read-only access the back-end data.

I've had first hand experience with this. If you're going to build a startup in this area it is important to be a stealth mode as possible. It's also important to have a budget for legal services and LegalZoom™ won't cut it.