They already have the barebones amount of information that the hospital provided due to the privacy application you signed. If you request an itemized list to the agency, the hospital is able to provide it. You’re trying to find a gotcha and doubling down on your misinformation which ultimately is your potential future problem and not mine. I’m just trying to protect others from your ignorance.