How so? It's a preventative. Says zero about their medical condition. It rveals less about them than reports of their Nyquil purchases, if any.
HIPAA is not limited to medical conditions.
It prevents release of personal health information. https://www.hhs.gov/hipaa/for-professionals/privacy/index.html#:~:text=The%20HIPAA%20Privacy%20Rule%20establishes,certain%20health%20care%20transactions%20electronically.