Did you know that every doctor’s visit, prescription, or medical test generates personal health data and that this information is being used in ways you have no idea about. Despite protections like HIPAA, companies are allowed to sell “de-identified” versions of your records, turning your medical data into a multi-billion-dollar industry.
Though anonymized data plays a vital role in research and public health, it raises ethical and privacy concerns. Patients are excluded from decisions about their data, and advances in technology mean “de-identified” information can sometimes be linked back to you. According to Adam Tanner, author of Our Bodies, Our Data: How Companies Make Billions Selling Our Medical Records, anonymization is not always foolproof. As he explains in the book, “The promise of privacy is often more of an illusion than a reality,” as technology can re-identify anonymized data by cross-referencing it with publicly available information.
Understanding how your data is being used—and taking steps to regain control—is essential for safeguarding your privacy and empowering yourself as a patient.
Data anonymization is the process of removing identifying details—such as your name, birth date, or Social Security number—from medical records and it is regulated by law . This allows your data to be used for other purposes, like research and development, while theoretically protecting your identity.
There is no doubt that de-identified health data has played a crucial role in transforming medicine, improving patient outcomes, and addressing public health crises. It has driven medical breakthroughs by helping pharmaceutical companies study disease patterns, track drug effectiveness, and develop new treatments. For instance, cancer researchers analyze anonymized patient records to refine targeted therapies, and COVID-19 vaccines were developed in record time thanks to global anonymized data that enabled rapid analysis of the virus’s spread and vaccine efficacy. Additionally, anonymized data aids in disease prevention and early detection, as AI models trained on de-identified health records can predict risks for conditions like heart disease or diabetes, allowing for earlier interventions. And these datasets remain a valuable resource for ongoing research, enabling scientists to uncover new insights, improve treatments, and refine public health strategies.
However, while anonymized data has driven medical progress, it has also become a lucrative asset—often exchanged, sold, and repurposed without patients' knowledge. What was initially intended to fuel research and innovation has evolved into a complex and opaque marketplace, where health data flows between organizations, sometimes prioritizing profit over patient privacy.
Your health data passes through a complex network of organizations, often ending up in the hands of third parties without your knowledge. Key players in this ecosystem include:
The profits generated from this data are staggering, yet patients are rarely informed or compensated for their contribution. Tanner highlights this lack of transparency, describing how patient records are commodified without patient involvement.
De-identified data isn’t as secure as it seems. The removal of personal identifiers is intended to protect your privacy, but in practice, the system is far from perfect. Risks include:
These risks highlight the need for stronger safeguards and greater patient control over health data.
For many patients, the idea that their medical data could be shared or sold is deeply unsettling. The fear of a privacy breach—especially one that could expose sensitive health conditions—creates anxiety and frustration. Patients trust healthcare providers with their most personal information, expecting confidentiality and security. When they discover that anonymized versions of their records are being circulated, often without their knowledge, it erodes that trust.
This growing mistrust extends beyond individual providers to the entire healthcare system. If patients believe their data is being commodified rather than protected, some may hesitate to seek care, disclose critical health information, or participate in medical research. The concern isn’t just theoretical— many breaches have occurred .
Fortunately, there are steps you can take to regain control of your health information and ensure it is used ethically:
Advocate for Stronger Protections Support initiatives that promote transparency and push for stricter privacy laws in the healthcare industry.
The healthcare data system is far from perfect. While anonymized data can drive life-saving research, it shouldn’t come at the expense of your privacy or autonomy.
Tools like Selfiie, Citizen Health , and Fasten Health are leading the way, offering patients secure options to manage and share their data on their own terms. Whether you choose to contribute to research, monetize your data, or simply ensure its privacy, the choice should be yours.
Taking control of your health data isn’t just about protecting your information—it’s about restoring trust and ensuring that healthcare systems work for everyone. Start by exploring your options and taking the first steps toward reclaiming your data today.