Did you sign a consent form for them to talk to each other? If not then yes, it's a violation of privacy.