Keeping clinical information about themselves from patients is now considered unacceptable, but transparency about clinical and institutional policies that may affect care is less universal