Therapists exist in a society where everything is digitized so they don't even think twice about digitizing these records. They aren't tech workers, much less security experts, so they really do this without a second thought.