What kind of data from hospitals and other health services other companies can collect?

If hospital or psychologist uses windows or office on computer is it possible that Microsoft collects or can collect such data where is my personal information like patient information or what was talked about with psychology? Those systems are really protected from attacks but can softwares still collect data from them.

data health hospitals privacy services