I run a ton of campaigns for medical practices. Med spas, oral surgeons, reproductive endocrinologists, and others. Having the pixel on the website is absolutely NOT a HIPAA violation. The practice giving you their current client list might be a violation, but depends on what info they provide. What type of practice is this specifically? Meaning, weight loss, ED treatment, dental, chiro?