Column names cannot be parameterized. You can probably use a stored procedure for that, or a simpler solution is to create a command for each of the fields.
B4X:
sql.select_field1 = SELECT * FROM patients WHERE field1 = ?
sql.select_field2 = SELECT * FROM patients WHERE field2 = ?
sql.select_field3 = SELECT * FROM patients WHERE field3 = ?
sql.select_field4 = SELECT * FROM patients WHERE field4 = ?
The command name can be built dynamically in the clients.