US states are selling data about patients, weakly anonymized so that the patients can be reidentified.