You would think that would matter, that they’re basically violating all known PII/HIPAA/GDPR/National security standards and god knows what else, but I expect at most some class action down the line.

> HIPAA

They're not directly or a business associate of an entity involved in providing you healthcare so not this.