This could be, but I work in a facility that requires HIPAA training, anything sensitive goes into locked boxes and is shredded on site. I can’t believe any medical or insurance-adjacent facility would not do the same. It’s illegal to not destroy patient info. If abortion clinics can’t afford a private service, surely…