I don't think patient results can legallay be shared (in the US) on a reference call with any specifics, and vague statements are no better or worse than a manager describing a dev's performance on projects.

And I'd be kind of surprised if a practice shared billing performance info. That'd be like sharing a tech support person's ticket close rate, but even more sensitive. Maybe at a very high level if HR isn't concerned with defamation claims?