You need to report this company. They are not supposed to have access to your medical records UNLESS you signed a release form to this company. This is a HIPPA violation. Health Information Privacy Portability Act of 1996 was enacted in order for ALL patients health records be kept CONFIDENTIAL.

http://www.hhs.gov/ocr/privacy/