A growing number of U.S. doctors can direct patients to Amazon.com Inc. to buy medical supplies via an app embedded in patients’ private medical record—a change that raises privacy concerns.