If you don't have a clinical relationship with OneMedical post-acquisition, Amazon has no clinical need to access to data, and doing so is a clear HIPAA violati

If you don't have a clinical relationship with OneMedical post-acquisition, Amazon has no clinical need to access to data, and doing so is a clear HIPAA violation. Clinical data is not the same as browser history or purchase history or ad clicking history or anything like that. The public health interest in being able to generate accurate diagnoses (among other things) from various providers, down to the location/clinic/doctor level, grossly outweighs any one person's right to say "well I don't like this company so take my email out of your database." Taking an extreme example, there are a lot of reporting requirements around HIV. Anonymity is important but the public health interest in accurate reporting outweighs that. Imagine someone being able to tell their local clinic 48 hours after an HIV diagnosis that they need to delete any record that they were ever there. It just doesn't work that way.