HIPPA and MedSpas

Looking into a business that contacted me and reviews like this are a nightmare to me. I just started breaching into the Med Spa domain rather than beauty spa (Medical rather than purely Esthetic) but am starting to see so much nastiness from doctors and nurses in the industry. I’m trying to gain a better understanding of HIPPA. When the owner of a MED spa responds to a customer review in this fashion (revealing services and dates) is that not breaking HIPPA? They are clearly identified. This is giving up Client Data, no? Are these offenses reportable? I would be so upset to share my experiences and have a “professional” clap back like I’m cheap …. Totally not professional at all. What do you guys think?