I ended up taking down the post just because of the doubt in the first place, her father has been posting on fb about her updates, but she does not regularly post updates. It was just to ask for prayer requests, but with my lack of knowledge I just didn't want to violate any rights at all.
I just graduated earlier in the year from nursing school and was confused when a friend told me that I was potentially violating HIPAA due to this scenario: I was notified of a friends hospitalization through Facebook by her father and visited her. She just so happened to be at the same hospital/facility that I work at. I saw her on a day off and with her permission asked if I could share with a private group an update (which went along the lines, "she is doing better and could use some thoughts and prayers") - she agreed and appreciated the thoughtfulness. If I share this on social media, am I breaking HIPAA? She was never my patient and I never read any of her medical information...so this is where my friend (who also graduated nursing school with me) confused me with this comment?