isnt it illegal for a doctor to give away personal information like that even if its about weed?