I wonder if it is even legal to use Windows 10 if you have to comply with HIPAA regulated.
I suggest using this incompatibility as leverage against this kind of data exfiltration. The only way a big company will change is when it hurts their pocket book. They might notice if enough businesses such as yours decline to use Windows 10 while complaining about this.
Of course, Linux is always a good choice, regardless of what MS is doing. If big players are already jumping to RHEL, now would definately be the time to switch.
The problem is that we deliver everything via the web so people will barely notice if we move our stuff over to an alternative platform from Windows.
Microsoft knows it has lock in from a lot of people and it will abuse this. I think their aggressive cloud move with Office 365 and Azure's PaaS stuff is an example of how they are moving this forward further yet retaining a subscription. NOTHING is portable away from them without significant cost.
Edit: just the effort I started two weeks ago to move all my data to platform neutral formats and shift to Linux is less than 50% of the way through and that's just one person with 20 years of data.
I suggest using this incompatibility as leverage against this kind of data exfiltration. The only way a big company will change is when it hurts their pocket book. They might notice if enough businesses such as yours decline to use Windows 10 while complaining about this.
Of course, Linux is always a good choice, regardless of what MS is doing. If big players are already jumping to RHEL, now would definately be the time to switch.