  As smartphones and smartphone applications are widely used in a healthcare
context (e.g., remote healthcare), these devices and applications may need to
comply with the Health Insurance Portability and Accountability Act (HIPAA) of
1996. In other words, adequate safeguards to protect the user's sensitive
information (e.g., personally identifiable information and/or medical history)
are required to be enforced on such devices and applications. In this study, we
forensically focus on the potential of recovering residual data from Android
medical applications, with the objective of providing an initial risk
assessment of such applications. Our findings (e.g., documentation of the
artifacts) also contribute to a better understanding of the types and location
of evidential artifacts that can, potentially, be recovered from these
applications in a digital forensic investigation.
