Security by design while developing the app
Privacy by design while developing the app
Website secure certificate (renew every year)
Secure mail transfer 
app and site protection in place and mitigation