A second lawsuit alleges hospitals violated HIPAA by providing private patient data to Meta that it sometimes then used in personalized Facebook ads.