Privacy settings are set at the youtube user level. If they set it as private then we cannot link to it. So the onus is on the individual that uploads the video. Of course if that is a physio etc. then they should take care to ask the patients permission if this is ok. (And make a written note of when they asked and the resultant answer)