Lawsuit claims 1,800 patients secretly recorded at hospital