Can you imagine if they decided HIPAA didn't consider "metadata" private? Sure, the doctor's notes are private, but the list of every procedure you've had and every drug you've taken doesn't count.