You can disagree with me all you want...
It doesn't change the fact that federal, and state, laws prohibit unauthorized disclosure of a person's protected health information, (PHI).
If you do disclose that type of PHI, and you do not have permission in writing, then you are breaking the law...plain and simple.
To your point about Steve Jobs and Apple, because it also pertains to the Javario situation:
If you want to read up on what the law says, start here ---- >HIPAA
Huh? HIPAA only covers certain institutions defined in the regulations, i.e., "covered entities"; mostly health care providers. HIPAA and fair hiring practices laws don't cover every Joe off the street; only certain institutions under conditions stated in the law.