(3) the person is a hospital, clinic, or other entity whose purpose is providing health care directly to patients, and the harm was caused by an employee or agent of the entity who used the device while acting within the scope of the employment or agency of the employee or agent; or