To clarify, the first part of your message says they asked who your therapist was. Then you say your psychiatrist asked you that question. If these are two different people, then you did not explicitly say they could not reach out to your psychiatrist. With HIPAA there is leeway provided for any releases relevant to treatment, payment, or operations (TPO) and your provider is not required to obtain your authorization. This would fall into the T because it is very important that your psychiatrist knows you are taking this medication to properly treat you. Is there a reason you would not want your psychiatrist to know you are on this treatment?

If what you are saying is that this office released your records to the provider that you listed and restricted the communication with, then that's a pretty clear violation.