In which of the following scenarios would an app be subject to the Health Insurance Portability and Accountability Act $($HIPAA$)?$

The app supports a marketing application for a new usage in an FDA$-$regulated product.

The app collects identifiable data from subjects.

The app stores or transmits protected health information $($PHI$)$ in a HIPAAcovered entity.

The app stores financial data in a HIPAA$-$covered entity.