I'm a consultant, helping a provider of small medical practice management software move to the web. We're looking for a host that has experience with HIPAA-compliance, and supports the MS Web stack (IIS/.NET/SQL Server)
Can anyone here provide a recommendation of such a hosting company?
Look at Connectria; they seem to meet all of your requirements and have a quite impressive client list. I haven't used them personally though.