Are they informed that their personal medical information will be shared with an unknown set of third parties / LLMs subject to manual QA / cloud services with telemetry?
Honestly sounds like she's opening herself up to massive lawsuits (depending on State law). I would reach out to the legal department if any doctor pulled this kind of shit on me.