How does this not violate HIPAA?
Because HIPAA only applies to specific people and organizations who have a formal role in your health care. It is not a universal law applicable to everyone, and Samsung is not your healthcare provider, insurer, nor part of any related entity.
How is HIPAA relevant here? Samsung isn't a covered entity. HIPAA is not just "I have some health data" freebie. Might as well ask why it doesn't violate Sarbanes-Oxley or Jim Crow.