We need a HIPAA for consumer devices.