Our Bodies, Our Data: How Companies Make Billions Selling Our Medical Records

Résumé de Our Bodies, Our Data

1. 1

   The Hidden Market for Your Medical History

   

   00:00

   00:00

   Imagine visiting your doctor, sharing intimate details about your health, and walking out with a prescription. What you likely don't realize is that within seconds, your medical information begins a journey through a multi-billion dollar marketplace. While your name is removed, everything else-your conditions, medications, test results, and demographics-is packaged and sold repeatedly to companies you've never heard of. This hidden trade processes millions of health records daily, with firms like IMS Health (now IQVIA) maintaining dossiers on over 500 million patients worldwide. Pharmaceutical giants consider this data so valuable they pay tens of millions annually to access it. Meanwhile, you probably can't even access your complete medical records during an emergency. This paradox sits at the heart of our modern healthcare system-a world where your most intimate details have become valuable commodities traded without your knowledge or consent.

2. 2

   From Corner Drugstore to Data Brokers

   Commencer l'écoute

   The digitization of pharmacies transformed them from medication dispensers into data collection points. It began in the late 1990s when local pharmacies computerized operations, though its roots trace to 1947 when student Ray Gosselin gathered prescription records-immediately attracting pharmaceutical industry interest. By the 1980s, pharmacy chains recognized the value in these data repositories. Data miners offered payments for prescription files with patient demographics and medication details, minus names. Today, pharmacy chains profit substantially from selling anonymized prescription data while remaining tight-lipped about the practice. As insurance coverage expanded, "clearinghouses" emerged to route claims between pharmacies and insurers while simultaneously harvesting valuable medical information. HIPAA, passed in 1996, protects identifiable health information but leaves anonymized data completely unregulated. The industry transformed when entrepreneurs monetized this digital information flow. Fritz Krieger pioneered this approach in 1998 through Cardinal Health's ScriptLINE service, capturing real-time pharmacy transactions. When approaching CVS, he discovered they already earned millions selling data. Cardinal's CEO suggested making pharmacies partners rather than mere data sources-a strategy that succeeded when major chains joined Krieger's ArcLight venture, expanding the profitable trade in patient data with minimal ethical consideration.

3. 3

   The Secretive Giant Behind Your Medical Dossier

   Commencer l'écoute

   IMS Health, a secretive $2.9 billion company (as of 2015), collects anonymized medical records on hundreds of millions of unaware patients. Its founder, Ludwig Wolfgang Frohlich, fled Nazi Germany in 1935 and established a Madison Avenue medical advertising agency by 1943. Frohlich and colleague Arthur Sackler revolutionized pharmaceutical advertising during the post-war "miracle drugs" era. Despite industry competition, they maintained a covert alliance, meeting privately to divide business and share client information. Frohlich created Intercontinental Marketing Services (IMS) as a market research company that ingeniously had clients paying for research that would ultimately justify more advertising. IMS grew by gathering prescription data from doctors and pharmacies, initially offering small gifts before increasing payments to approximately $50 monthly for doctors and a penny per prescription for pharmacies. Paradoxically, while building an empire profiting from others' medical information, Frohlich vigilantly protected his own privacy - concealing both his Jewish heritage and homosexuality amid persistent American anti-Semitism.

4. Chapitre 4

   Targeting Doctors and Building Patient Profiles

   By the early 1980s, data miners began ranking doctors by prescribing habits, allowing pharmaceutical companies to target high-prescribers and compensate sales reps accordingly. This transformed pharmaceutical marketing into a precision operation. Before computers, drug reps relied on pharmacists for information, but by 1988, companies were gathering prescriptions from thousands of pharmacies for about a penny each. IMS's Xponent service (1993) promised significant sales increases: "winning just one more prescription per week from each prescriber yields an annual gain of $52 million." This doctor-identified data became a powerful secret weapon. When Shahram Ahari joined Eli Lilly in 1998, these reports were "super-top-classified" - reps couldn't mention them to doctors. Unlike traditional research requiring consent, most people unknowingly contribute to commercial longitudinal data files. Data miners compile anonymized dossiers from insurance claims, prescriptions, electronic records, and lab tests, creating comprehensive profiles that advance research while raising privacy concerns. This commercial analysis gained momentum in the 1970s as companies sought to reduce healthcare costs. Medicare and Medicaid's creation in 1965 accelerated claims data computerization, creating vast information repositories. While some pioneers refused to sell patient information due to re-identification risks, others embraced the opportunity.

   Chapitre 5

   The Myth of Anonymity in a Data-Rich World

   Despite industry claims about anonymization, re-identification is increasingly possible with advanced computing. Even insiders admit that with enough data, identifying individuals remains possible regardless of obfuscation techniques. Computer scientist Latanya Sweeney demonstrated this in 1997 by identifying Governor William Weld in "anonymized" insurance records using only birth date, ZIP code, and gender - three data points that could identify 87.1% of Americans. Our unique data patterns create digital fingerprints revealing identities. New York Times reporters re-identified a woman among 657,000 anonymized AOL users through search patterns, while Princeton researchers matched Netflix rental histories with IMDB reviews to identify users. Medical data is particularly vulnerable as specific combinations of age, location, and health characteristics make patients identifiable. With constant digital traces generated through phones, apps, searches, and purchases, re-identification becomes increasingly feasible. Meanwhile, data breaches directly expose millions of records - between 2009 and 2016, over 1,300 breaches exposed more than 170 million patient files, including Anthem's breach affecting 78.8 million people.

   Chapitre 6

   The Data Economy's Major Players

   Major health insurers have established specialized data analysis companies: UnitedHealth's Optum, Anthem's HealthCore, and Blue Cross Blue Shield's Blue Health Intelligence, which holds data on 125 million people. Non-healthcare entities have also entered this space-IBM accesses over 300 million patient records, while LexisNexis maintains the largest medical claims database covering 250 million patients. This business model dates to 1981, when Ernie Ludy's MedStat Systems offered companies free analysis in exchange for permission to sell anonymized data to pharmaceutical companies-a venture so profitable he sold it for $339 million in 1994. Companies trading medical data typically avoid transparency about these practices. While Walmart's executive VP claimed, "We do not share this kind of information externally," CVS acknowledged, "Pretty much everyone in the business has some sort of supply arrangement for de-identified prescription data." When questioned about privacy vulnerabilities, IMS Health provided only brief statements about their commitment to privacy and security.

   Chapitre 7

   Reclaiming Control of Our Medical Identity

   What's needed is simple: more transparency, consent, and control. Your health data contains your most intimate secrets, with greater risks than other personal information. Yet the current system trades this information as a commodity without your knowledge. Many would willingly share health information if they understood the purpose. The issue isn't using medical data for research - it's the lack of patient control and transparency. Despite the big data revolution, randomized clinical trials remain medicine's gold standard, with executives rarely providing specific examples of insights gained beyond vague "cost efficiencies." The solution: HIPAA protections should extend to all health information, not just "individually identifiable" data, and should apply broadly beyond current "covered entities" to include health device makers, fitness trackers, apps, and DNA services. These aren't anonymous data points - they're the intimate details of our lives and bodies. If anyone should control that information, it should be us.

   Continuer la lecture