Colorado's law is pretty weak sauce, but I guess it's a start.

For my part, I can't think of a group of entities I'd trust less with this sort of data than SV and SV-style companies and startups. The fact that they are increasingly sticking their fingers into health/body/brain-related stuff terrifies me.

I mean, I can avoid using their stuff in my daily life -- but what happens if I end up needing medical care? Are my doctors just front men for these companies? How can I know? I don't know how I can reasonably protect myself from them, at least if an urgent medical matter comes up.