Researchers noted transmissions of specific sensitive data, such as a user’s drug list, that could de-identify the user and be repurposed for commercial uses.