Usually they would just use an off the shelf product and extend it, so they wouldn’t produce the absolute horror story described in the article, no.
I’m not even sure what your last comment means, are you contending that it is a good thing this company violated multiple laws with sensitive patient data?