I had an eye exam where the receptionist / salesperson read that I worked at Company X on my insurance. As we made polite conversation, I relayed that I worked

I had an eye exam where the receptionist / salesperson read that I worked at Company X on my insurance. As we made polite conversation, I relayed that I worked on Project Y (a popular consumer product). A couple of weeks later, she used my patient info to call my private phone at 6:30am to ask for tech support. I was appalled, but politely informed her that this was inappropriate and how to seek support through the designated channels. I thought about contacting the office to inform her superiors about the privacy violation, but didn’t. I sometimes wish I had. I always wonder if I dropped an opportunity to protect others from similar abuse of patient records.