huh TIL. Seems like HIPAA should changed to account for this type of situation as it seems like corporations can't be trusted to do the right thing