HIPAA Horror Show: Why You Should Never Let a Clinic Use a Personal Phone to Scan Your ID A Palm Springs clinic violated HIPAA by using a personal phone to scan patient IDs. Here’s why it’s a major privacy risk—and what should be done instead.