Hospital accused of posting sensitive medical records on Facebook