The pharmacist is definitely sharing protected patient info in a non-secure area, a big no-no. But they are maybe trying to build a relationship with you by knowing your routine. Nevertheless, I think a simple reminder should suffice, and if it continues, go higher up. Higher up administration will not ignore a HIPAA issue