This is a violation of the HIPPA law! 

Here is a friendly reminder according to HHS: 

What Information is Protected

Protected Health Information. The Privacy Rule protects all "individually identifiable health information"held or transmitted by a covered entity or its business associate, in any form or media, whether electronic, paper, or oral. The Privacy Rule calls this information "protected health information (PHI)."¹²

“Individually identifiable health information” is information, including demographic data, that relates to:

• the individual’s past, present or future physical or mental health or condition,
• the provision of health care to the individual, or
• the past, present, or future payment for the provision of health care to the individual,

and that identifies the individual or for which there is a reasonable basis to believe it can be used to identify the individual.¹³  Individually identifiable health information includes many common identifiers (e.g., name, address, birth date, Social Security Number). 

*This needs to be quickly