Aren't medical records supposed to be confidential and be on a "need to know basis"? So they're just ok with broadcasting to everyone about your medical history, immunization records and whether you've ever had certain diseases, conditions and the like?