HIPAA is interesting...
While HIPAA was meant for the medical industry safe guarding your medical data, Google isn't in the business of medicine thus is outside of the law. So we need to modify the law.
Until then, if any hospital or medical facility transfers your data to Google without your consent, you have a major lawsuit against said facility. Under HIPAA if you see a doctor in the hospital and then have a follow up at his clinic, you need to sign a release. (Same doctor, different facilities.)
If you don't consent to having your data on Google, under HIPAA you can sue.
As pointed out ad nauseum, google doesn't have to sell anything to profit from your medical records. Imagine going to a web page that has google ads. Isn't it a funny coincidence that you're an asthma sufferer and you see some adds for asthma medications? ;-)
They're not evil, they just think that we're dumb.
Paris because she's made a profession of acting dumb and laughing all the way to the bank.