How is such sensitive information protected?

Beyond-baseline access controls, encryption, and documented safeguards through HIPAA compliance services, trust deserves nothing less.