Clearly medical privacy does not exist.
What Amino has done can easily be done with anonymized data. They only need to know patient age, patient gender, physician, location of physician, what the physician billed for (I assume the ICD-9 codes). I doubt there's enough information there to identify individuals.