Healthcare firms are scrambling to reassess how their websites collect user data following HHS’ web-tracking crackdown — and your startup could be next.