Did you ‘check in’ at the doctors office? Front desk people easily could have put the doctor’s notes into their computer system - and God only knows where that information is sent off to...
HIPAA is very strict about that stuff. A service provider could be out of business immediately for a violation of privacy.
The phones are another matter.