My cardiologist office has an Alexa speaker right on the reception desk, presumably with the cloud listening to everything the local command daemon can't understand. Office manager arrived to start a shift and commanded it out loud to play Office Playlist.

Is this a HIPAA violation?