The gist of HIPAA is that the patient decides who knows their health status. If they want to announce every rash and sniffle on Meta and thus to every advertiser and government agent in existence, HIPAA won’t stop them.
Doctors are allowed to broadcast their own, personal health issues all over social media, but not anyone else’s.