It is important to understand that doctors and medical establishments are covered by HIPAA. But that coverage does not extend to non-medical personnel or facilities. As a result, while it extends to the medical plan your employer may offer, it does not extend to the employer’s records. You can find out more about what information the employer may request and what enters the employer’s records at Employers and Health Information in the Workplace | HHS.gov

It is also true that medical information on a smartwatch or monitoring device from a computer store is not covered by HIPAA.

Likewise, insurance companies cannot obtain your medical information without a business-related reason. However, they can access your medical information to determine coverage eligibility and when they authorize payments for medical services