How healthcare providers perpetuate a solvable privacy problem