WebACL is not bullet proof, but it does add another layer of privacy, at the web level. The startup was saying that they see an opportunity around improving how clinical trials are done, when users can control their own data. Might be an angle for you.