Hi JB,
Thanks for your question. Actually the Esri World Geocoding Service is HIPAA aligned when used in North America. By HIPAA aligned, I simply mean that there is more to HIPAA than just the technology (there are also people and process). On the technology side, the geocoding meets HIPAA criteria.
To learn more about geocoding health data with best practices, we've put together a tutorial that will provide more information. Here is the link: https://learn.arcgis.com/en/projects/protect-patient-data-when-geocoding/ .
If you need any additional information about geocoding or otherwise dealing with sensitive health data, please feel free to email me at egeraghty@esri.com.
Best,
Este
Este Geraghty, MD, MS, MPH, GISP
Chief Medical Officer, Esri