On the input side, what do you need to store? Is it mostly just text? Or do you need to store other media and file formats too (photos, PDFs, word processing docs, spreadsheets)?
On the output side, what are your needs around accessing the information once it’s stored? Just look up by patient? Search across everything? Export to other formats? What else do you need to do with the data?
I strongly suggest whatever tool you use has encryption - your carrying what could be what my field calls PII _ Personally identifiable information (unless you mean medical records - no SSN, birthdates etc) -
it sounds like you need a custom CRM tool - airtable comes to mind but not sure of that vendor encyption capabilities