Hospitals and Healthcare related companies (e.g. Insurance) at least are required by HIPAA to meet certain security standards. Whether they actually do or not, well who’s gonna know if we are just really careful about hiding the stickynote with the password on it.