The problem is that the data obtained via a third party, without a warrant, is admissible in court. And IANALE, but HIPAA has exclusions and exemptions for law enforcement.