Hilarious!
I was just tonight discussing the idea of pre-exporting some encrypted data to a drop-box folder that was in essence, the same data you are descriping, and then doing a simple iPad app wrapping Ajax/HTML that loaded (decrypting) that data.
Thats geek talk for basically what you said (but with a veneer of security, and a bit more extendable to gradually add more features).
A definite low-hanging-fruit approach ;-). It would give READ ONLY access to a PHR (with minimal programming). And it fits nicely with another request made by someone to have scheduled (synchronization) of reports to a drop box account (so those reports could also be viewed).
There is a bit of polishing I need to do with HealthFrame v3 for windows - to make sure its truly stable (v3.0.1 building tonight). We'll see...