The bot asked about people’s Covid vaccination status, breaching a policy on private medical data.