He would need to have a contractual relationship as a vendor or service provider to a covered entity to even maybe qualify as a business associate. Does he have that? I doubt it, this just seems like one person’s side project.