Several U.S. state health exchanges under the ACA shared sensitive personal health data with third-party platforms like Google, LinkedIn, and Snapchat, raising privacy and compliance concerns.