What counts as patient information here?
Names, initials tied to a visit, dates of birth, record numbers, phone numbers, addresses, photos, schedules with names, portal screenshots, insurance cards, and anything else that would tell a stranger who was seen. A count of calls by hour is not that. A description of a role is not that.
What should you send instead?
How many, who owns the step, and what closed means. Fake examples if a script needs a name. Your own counsel if you need a privacy ruling. HHS explains the privacy rule at hhs.gov/hipaa. PXC does not offer a compliance badge, and does not give legal advice.
If something sensitive arrives by mistake, do not add more detail in a follow-up. Call (941) 239-2309 and say a file needs to be deleted. The preview site stores nothing because the forms are not connected.