Ketan,
I am a bit overly cautious but the only means I am allowing my nurse is mail, fax, telephone, or secure messaging within the Updox portal. Except technically the only e-mailing is the message sent to the patient that they have a message in the Updox portal (but no patient information). We are in the process of transitioning to GoDaddy for the front office staff to secure-email.
With the HIPAA police on the prowl I want to be fanatic about security.