Their comment "The best way I have heard of dealing with this is to ask what their service animal has been trained to do."
Your response "That is a HIPAA violation"
Now your suggestion "[ask them] what work or task has the dog been trained to perform."