The email landed in Sarah’s inbox at 7:42 a.m., somewhere between a pharmacy coupon and a PTA reminder.
“New ways to unlock the power of your health data,” the subject line promised, next to the familiar blue logo of a tech giant she trusted.
She tapped.
Inside was an invitation: connect her medical records — all of them — to a sleek new app “powered by leading AI” to help her manage prescriptions, appointments, and future health risks “in one simple, secure experience.”
A single button waited at the bottom of the screen: Agree and continue.
What Sarah didn’t know is that this wasn’t just a new app. It was the front door to a sweeping, federal-backed experiment that could redefine who controls the most intimate data humans produce: their health.
The New Deal Between Washington and Big Tech
In late 2025, the federal government quietly launched a health data–sharing initiative that reads like the beginning of a new operating system for American healthcare.[1][5]
On paper, it sounds empowering.
Over 60 companies — including Apple, Google, Amazon, OpenAI, CVS Health, and UnitedHealth — have agreed to participate in what officials call a “patient-centered health data ecosystem.”[1][5] The initiative is being run through the Centers for Medicare & Medicaid Services (CMS), which holds claims data on tens of millions of Americans.[1][5]
The basic pitch:
- Patients can opt in to let approved apps and platforms access their electronic medical records.
- Big Tech builds slick tools on top — personalized dashboards, AI assistants, predictive health insights.
- Government agencies provide the pipes and standards, and promise that patients stay “in control.”[1][5]
At a White House event, CMS introduced “trusted, patient-centered and practical” data exchange criteria and said it would start sharing its own Blue Button claims data through aligned networks as early as 2026.[5] For the first time, patients would be able to access their records using “modern identity solutions” — think logging in with an existing tech account instead of remembering yet another password.[5]
On stage, it sounded like progress.
But underneath the polished language lies a more unsettling question:
When your medical records meet Big Tech’s AI machines, who are they really working for?
How the Pipes Work — and Why They’re So Powerful
To understand what’s happening, strip away the buzzwords.
At its core, this initiative does three critical things:[1][5]
- It connects federal health data (like Medicare and Medicaid claims) to private tech platforms through standardized digital pipes.
- It gives apps and AI tools a legal, structured way to request and process that data once a patient clicks “yes.”
- It lays the groundwork for an “ecosystem” where medical, behavioral, and potentially consumer data can be combined to build powerful prediction engines.
“Think of it as building a four-lane highway from government databases straight into the servers of the largest tech companies on Earth,” says Dr. Lena Ortiz, a fictional but plausible health data governance expert at a major research university. “The question is not whether the cars move fast. It’s who owns the road — and the traffic patterns.”
Supporters insist the system is voluntary. Patients must opt in. Apps have to be approved. Data is protected by HIPAA and security standards, they say.[1][5]
But pause on that word: voluntary.
“If you bury life-altering consequences inside a cheerful consent screen, is it still a meaningful choice?” Ortiz asks.
The Human Cost, One Family at a Time
Back in Ohio, Sarah clicked Agree.
Within weeks, the app felt magical. It pulled in her lab results from three different clinics. It reminded her about refills before she ran out. It flagged a possible drug interaction and nudged her to talk to her doctor.
Then something subtle shifted.
An insurance renewal form asked if she’d like to “streamline” verification by linking to her “trusted health platform partner.” Her employer’s wellness program offered gift cards if she “shared data for a more personalized plan.” A telehealth provider hinted that “enhanced data access” could reduce wait times for certain specialists.
Sarah started noticing eerily targeted ads for high-interest medical credit products after a difficult appointment about her chronic condition. No one could show her a direct line from her records to those offers — but the feeling settled in anyway:
Somewhere, someone knew too much.
Industry Spin vs. Privacy Alarms
Federal agencies describe the initiative as a “patient-centric health tech ecosystem.”[5] Tech companies frame it as unleashing innovation — better care coordination, fewer duplicate tests, smarter AI that can catch disease earlier.[1][5]
Privacy advocates see something else.
“Once health data flows through commercial stacks, it becomes nearly impossible to track all the hands it passes through,” warns a fictional civil liberties attorney at a nonprofit modeled after groups like EPIC, which actively challenge data abuses.[7] “De-identification — stripping obvious identifiers like your name — is not a magic shield. With enough data points, people can be re-identified.”
Legal scholars point out that we have strong public transparency tools – like the Freedom of Information Act (FOIA) – for governments, but nothing equivalent for Big Tech.[6] Companies that now hold “critical data about our lives” are not elected, not obligated to be transparent, and driven by profit, not public service.[6]
Combine that with a federal strategy that’s actively trying to break down data silos and expand “secure access” to government data for AI use,[4] and a pattern emerges: Washington isn’t just regulating data. It’s actively feeding it into AI systems across agencies and private partners.[4][5]
A New AI Regime in the Background
Zoom out further, and this doesn’t look like an isolated health initiative.
In December 2025, the administration signed an Executive Order building a national AI policy framework that aims to preempt state AI laws it considers too restrictive.[2] It directs federal agencies to:[2][4]
- Identify “onerous” state AI regulations and potentially override them.
- Tie federal funding to whether states fall in line on AI rules.
- Create uniform federal standards for AI disclosures and practices.
At the same time, the White House AI Action Plan calls for expanding secure access to federal datasets and building shared compute environments to power AI models across agencies.[4]
Put simply:
The government is centralizing AI power and data access at the federal level — and Big Tech is not just a vendor. It’s a partner.[1][2][4][5]
What’s Next — and Could It Happen Again?
The health data initiative is still rolling out. CMS plans to start sharing patient claims data through aligned networks by early 2026, using “modern identity solutions” that make it easier to connect your entire medical history with a single login.[5]
Done right, this could save lives. AI tools, trained on rich, high-quality datasets, can spot patterns humans miss. They can flag dangerous drug mixes, detect early-stage disease, and tailor treatments in ways that were science fiction a decade ago.
Done wrong, the same infrastructure becomes a surveillance-rich marketplace where your cancer scare, your relapse, your abortion, your therapy notes, and your genetic risks quietly shape:
- the price you pay,
- the coverage you’re offered,
- the jobs you’re considered for,
- and the financial products pushed your way.
The pipelines are being built now. The incentives — profit, political control, and efficiency — are already aligned to keep them full.[1][4][5]
So the real question isn’t just “Do you trust the government?” or “Do you trust Big Tech?”
It’s this: If the most intimate data about your body becomes the fuel for someone else’s AI, what would it take for you to say no — and will that option still be real by the time you try?
FAQ
Is the federal health data–sharing initiative mandatory?
No. It is designed as an opt-in system, where patients can choose to share electronic medical records with approved apps and platforms.[1][5]
Which companies are involved in this health data ecosystem?
More than 60 organizations, including Apple, Amazon, Google, OpenAI, CVS Health, and UnitedHealth Group, have pledged to participate in the federal health data–sharing ecosystem.[1][5]
How does federal health data sharing affect my privacy?
If you opt in, apps can access your health records via standardized connections. While rules like HIPAA and security criteria apply, experts warn that once data moves into broader commercial systems, tracking all downstream uses becomes difficult.[1][5][6]
Can AI use my medical data under this program?
Yes. AI-driven health tools can be built on the medical and claims data accessed through this ecosystem, as part of a wider federal push to use AI on government datasets.[1][4][5]
What protections exist against misuse of my health records?
HIPAA, federal privacy laws, and program-specific criteria are intended to govern access and use.[5] However, advocacy groups argue these safeguards may not fully cover complex, AI-driven data sharing in commercial contexts.[6][7]
What is federal health data sharing with Big Tech, in simple terms?
It is a public–private system where the federal government lets you route your medical records into apps and platforms built by major tech and health companies, so they can analyze and act on that data — ideally to improve your care, but with real privacy trade-offs.[1][5]