In other words, they are storing customer personally identifiable health data. This is *not required for reasons other than monetizing that personally identifiable information*. A reputable product would be e2e encrypted and anonymized at its very core.