Katherine Dee on Instagram: "She left a review and the Medspa replied by revealing her treatment details. That’s illegal. Many med spas respond to reviews by mentioning what you had done or when you were seen. That’s a direct HIPAA violation, and it’s a sign no one with medical training is supervising what’s happening behind the scenes. If a spa can’t protect your privacy online, you have to question what else they’re not protecting. What’s the biggest red flag you’ve ever seen in a med spa’s re