People assume all their health information is covered by HIPAA and that's just not true, wellness programs are on the border. Some are and some aren't. How can a mere mortal tell? A lot of information can escape into the great American marketing machine, which is desperate to get information on a person's health.