Is Using Google Health Healthy?
2008 May 20

Yesterday, Google launched their newest product, Google Health, a web-based tool that lets you track your medical conditions, history and medications all in one place. Some medical providers can even connect to Google Health, so you can import your complete health history as easily as you can invite all of your MSN contacts to sign up for Gmail.
Scary, right? Of course Google promises that they will keep your information “safe and secure,” but safe and secure from whom? The privacy policy mentions that they will use your personal health data in ways not clearly defined:
Google will use aggregate data to publish trend statistics and associations. For example, Google might publish trend data similar to what is published in Google Trends.
They might. Or they might not. This vague “policy” doesn’t inspire confidence. But it gets worse:
None of this data can be used to personally identify an individual.
We know this isn’t true, as we’ve already seen how ostensibly anonymized data can be used, with some detective work, to reveal identities. And if no one has ever captured and published this particular data before, how can we be certain that individuals can’t be identified with it? More importantly, does lumping my information in with others’ and then publishing it on the web qualify as keeping my health records “safe and secure”? Obviously, Google and I disagree on this point. But we have already transitioned into a world where Gmail mines our emails, and Mint monitors our personal finances, so why not do the same with medical records?
An efficient, secure tool for managing one’s own health information would be an enormous asset. I just don’t think that a web-based, hosted solution is in the individual’s best interest. Convenience doesn’t always have to come at the expense of relinquishing control of our private data.
Also see: NY Times story

