Passcodes and double-authentication work to protect any ePHI on the device if a cell phone falls in to the hands of someone other than the owner. Advise Mobile Users to Handl e Patient Data Safely with Secure Apps . The HHS and OCR have launched a portal that features a list of health application developers to.