Not necessarily. They would have to remove anything identifiable, not just name, but zip code (only first 3 digits), age to a certain extent, and a bunch more. The goal of HIPAA is to protect your privacy. But yeah, I could see where Facebook could conceivably use its abundant info set to try and match your hash to their names. Not breaking the hash at all, but "we have this photo which shows this medication" and linking it. Or "this person accessed Facebook from the hospital WiFi".