When 23andMe recently filed for bankruptcy and California's Attorney General recommended customers delete their data, it highlighted a fundamental problem: health information is often treated as a company asset rather than personal property.