Get our complete Guide on How to get HIPAA Compliant. A patient might notice you’re using insecure email and complain.Google’s employees can (though usually don’t) see your emails.Google’s computers scan emails for advertising.Google will only sign a HIPAA BAA with paid customers.Unfortunately, only the paid version of Gmail can be used for handling PHI, and only if it's set up the right way. What should you do next? 1) Become a Google Customer