HIPAA is a set of U.S. rules/standards for security and privacy (among other things) of medical records. Hefty fines and other legal consequences for violating HIPAA standards.
Dropbox reportedly did not develop their security w/ HIPAA in mind......thus, even though they might be secure, health care providers take legal risks by storing health info on dropbox.