'Why not?' you ask? Let's look at HIPAA for starters: https://www.quora.com/Do-current-HIPAA-rules-require-publicly-viewable-machines-to-not-have-tabular-lists-

'Why not?' you ask? Let's look at HIPAA for starters: https://www.quora.com/Do-current-HIPAA-rules-require-publicly-viewable-machines-to-not-have-tabular-lists-pull-down-menus-of-patients-or-autocomplete-except-for-fully-unique-matches https://www.quora.com/Do-current-HIPAA-rules-require-publicl... "In summary, HIPAA does not specifically limit the use of drop down menus or auto-complete, but if patient information was exposed to the public through these features your business would have failed to control access to the protected health information." So now there's a risk that if a user of a medical information system uses a shared computer (say one at home but that friends and family occasionally use) you can't be sure to have protected control. It's all very well saying 'users should use private browsing mode' - you try enforcing that consistently when you have hundreds of users. Ultimately, you end up having to restrict access which is why I felt it does a dis-service to users.