A dental practice holds Social Security numbers, insurance files and payment data with none of a bank's oversight.