This is a blatant violation of patient privacy. That the output is often hallucinated doesn't even matter here. If the hospital wants to use LLMs, better deploy them on-premise or a trusted network at least.
Enterprises are ok sharing their code base with OpenAI. I think it should be okay for patients.