Hi Boris,
We offer several ways for applications to authenticate. If your application does not have a user present, then the app would likely use access on behalf of a system. All methods rely on the OAuth 2 specification.
Note: If an app utilizes system level access, all HIPAA/Meaningful Use auditing and privacy/sensitive data filtering would be the apps responsibility, assuming a user eventually sees the data within a separate system.
~ Jenni