“Project Nightingale” is fully HIPAA-compliant, according to Google — but researchers said they see big red flags for consumer data privacy. Read more