My Health Record is scrambling to put tough new restrictions on mobile phone apps that use its sensitive patient data, including an option to cancel if the companies damage the system's reputation.