Exactly, HIPAA only prevents medical professionals (including therapists) from providing medical information about their clients/patients to others. Not about themselves. They can choose not to answer a question about their own vaccination status (whether for Covid or, say, measles), but they can't claim HIPAA as the reason.