-
Yes.
If you are a G Suite admin simply search the management console for HIPAA Compliance. Declaring you are an entity covered by HIPAA and then go through the compliance agreements.
Beware... I don't know of how to undo the process, and don't know if there are future repercussions from doing it (compliance or otherwise).
An example of impact is that it takes me a very long time to get new features.
This is what you'd be declaring and signing up to: https://admin.google.com/terms/cloud_identity/3/6/en/hipaa_baa.html
Well_is_it
Velocio
I use the standard Google build on a Google Pixel 2 and run NetGuard set to whitelist mode... meaning that all traffic from the device is by default blocked... and then I whitelist only TLS secured traffic (typically HTTPS on port 443) to same vendor domains (same vendor as the app).
The only exceptions are that I actually trust Google so I whitelist them (I don't have a Gmail account and my Google Apps is down as a health company white means I get privacy as if my email was that of a medical doctor), and I trust browsers (when I'm choosing to visit web sites).
For browsers, I use Firefox Focus for anything I think likely is toxically bad, Brave for anything I half trust but am likely visiting once, Firefox for things I trust and am visiting more than once, and Chrome for anything Google plus LFGSS.
Basically: I filter my traffic, compartmentalise my browsing.
Oh, and if NetGuard alerts me that something is trying to access data in the background (when I haven't whitelisted)... those apps are getting notifications disabled as well as background processing disabled.