If you've ever been to a hospital in the US then your health data has definitely been sent to a third party to be fed into models. It's standard practice prett

If you've ever been to a hospital in the US then your health data has definitely been sent to a third party to be fed into models. It's standard practice pretty much everywhere. With that said, the third parties are (generally) subject to all of the same HIPAA regulations that providers are. They sign contracts that effectively make them covered entities under HIPAA.