Medical Records: a HIPAA Violation

My question involves public health law in the State of: OH

Is it ok for a doctor to record on their personal phone your encounter with them for note taking purposes?

I would be concerned if the devices was lost, stolen, and or hacked and who might this info be shared with.

Medical Records: a HIPAA Violation