under Google's own terms of service, which you can read at ... under Google Health, then it could sell off those records to a third party