My latest story, for the Atlantic. https://www.theatlantic.com/technology/archive/2023/09/online-privacy-personal-health-data/675182/