Don't companies usually make you consent to let them use your data before you can use their site/app?
If a person puts HIV status on their profile, that data is obtainable even if it's not visible, if you can search by it. Just filter out HIV- profiles, and if your profile shows up, you're +. And if you can't filter like that, what's the point of putting that info on your profile at all?