Hard to see how this doesn't end poorly. In addition to being a likely HIPAA violation, its hard to see how the patients won't view their privacy as having been violated, and the doctors won't see their trust/business relationship as having been violated. In both cases (of doctors and of patients) there's plenty of potential litigatory fuel, which, even if Practice Fusion wins, is a really poor use of ~140m in venture funding.