There are no healthcare privacy laws the the USA that apply to Google. Indeed, "medical information" is not generally protected. HIPAA only prevents "healthcare providers and healthcare businesses" from providing that information without your consent. If you disclose or leak medical information to other companies, they are not required to maintain confidentiality and can sell or use that information perfectly legally.