Returns the patient's profile as the member has shared it with providers — personal,
address, medical, lifestyle, goals and care sections — together with their contact
details, the bookings they hold with your organisation only (the API never exposes
a member's bookings with other providers), the number of clinical notes your
organisation has recorded, and whether the document vault is unlocked.

A patient is in scope only while they have at least one booking with you; anyone else
returns 404 (not_found) — deliberately not 403, so patient identifiers cannot be
probed.

This is a PHI disclosure: every call to this endpoint is recorded in your provider
activity log before the data is returned.