This seems like a profoundly bad idea on the face of it. Moreover, in the US, there’s no way this passes HIPAA compliance.