In the US, patient data privacy is an illusion