The hospitals stated that they and their “Third Party Service Provider[s]” collected and saved “the default information ... such as the difference between communicating with another person on a cell ...