True - they wouldn't unless it is discovered and disclosure is mandated by a legal process. otoh - OP could provide a service where these results are completely anonymized if the person requesting the test so desires.