Debt collection — United Collection Bureau, Inc. (OH)

Talked to a third party about my debt. XXXX XXXX ( Pain management clinic ) gave United Collection Bureau based out of XXXX, Ohio a copy of my medical records, that includes my medical diagnosis, treatment plan, and health insurance information, including my health insurance policy number, group number, and the amount paid to my insurance company. I feel that this is a violation of the XXXX act. I know third party collection agencies can contact doctors, or hospital 's to obtain information in relation to collecting a debt, but I also know they are not allowed to obtain my personal account information, such as the ones described above. I want to know why United Collection Bureau needs to have a copy of my health insurance information including my policy and group numbers and the amount tha