Medical privacy - Personal medical history given to 3rd party against patient's consent.

Went to urgent care for an injury. Later find they gave my personal medical history to a 3rd party service provider and my personal medical history was then posted online to the internet. Go back to their office request they take it down and that they are breaking privacy law. They say I consented on a form when I came with my injury, I said no I didn't because I came for care of injury not to be tricked into their illegal use of my personal medical information - I hand wrote on their microscopically printed form I do NOT consent to the release of my information to any third party service providers and gave that to them and kept a copy. Talked with four different people there, (Office mgr, staff, customer care) they refuse to listen. Problem ongoing. Remedy: Have clinic instructed to remove my medical information from 3rd party service provider and/as well as have that information taken down from the internet.