Physical therapy provider settles violations that it impermissibly disclosed patient information