In general it is commendable your friend's doctors would want to ensure he is in good hands (if that is genuinely their motive), but it is scary they could get your medical records without your consent.

I don't know the legal/constitutional environment in which you live, so I don't know what to suggest - complaint or simple inquiry/clarification.

I personally would be a bit shaken after that phone call.