We all know that Google reads our email. Those contextual ads in Gmail are the quid pro quo for free Internet email. With the launch of “Google Health” the question becomes “but will they read my healthcare records?”
John Halamka, M.D., CIO of the CareGroup Health System, CIO and Dean of Technology for Harvard Medical, author of the highly regarded Geek Doctor Blog and an unpaid advisor to Google (hat’s off to Dr. Halamka) says no.
Security and privacy are foundational to Google Health. The privacy policy, with oversight from the Google Health Advisory Council, stipulates that data will never be transferred, sold, mined or released without specific consent of the patient. Patients completely control the content and may remove it any time.
But I’m not so sure. Remember the Google Reader debacle? When business acquaintances with whom you chatted perhaps once suddenly had access to your RSS feeds? This prompted a public outcry of protest, with journalists like Garett Rogers of ZDNET to demand “Close all Google accounts: Google doesn’t care about privacy!”.
Privacy International - an internet privacy watchdog - placed Google at the bottom of the list of Internet service companies. And David Harlow’s Health Care Law Blog says Google Health privacy policy can be changed at any time in the future.
Now some might argue that opting in to online healthcare records represents an informed choice between convenience and privacy. But when companies like BIDMC, Cleveland Clinic, Longs, MEDCO, Minute Clinic/CVS, Quest Laboratories, RxAmerica, Wallgreens and now BlueCross BlueShield (see Boston Globe article) want to link up with you the stakes get significantly higher. Most Americans have strong sentiments about the trustworthiness of medical insurance companies.
I am much more intrigued by Microsoft’s Health Vault, particularly in light of the announced relationship with Kaiser Permanente. Here patient data is not only centralized but enhanced by value-added services like interpretation and explanation.
Consumers can not only see a record of a test that they had, but also the result of that test and in some cases, direct feedback from their doctors about the result.
Not only is Microsoft’s privacy record thus far superior to Google’s but they are offering data portability. Leave Kaiser and take your data with you.
There are no easy answers in the wild west of medical privacy. But given the gray market of pre-employment screening of job applicants for adverse health conditions and the rampant fears of genetic discrimination the best answer to: “should I put my records online?” is
“Caveat emptor. Don’t do it if you don’t have to.”