You'd be surprised how often companies use PHI (legally) and healthcare provider networks don't care.
The few with smarter lawyers and IT departments, usually academic, do but a majority of all of the new "AI" health tech products I've heard about pitched to hospitals use customer PHI for product development.