These types of programs do exist in most insurance companies in the United States. Predictive analytics against claims and clinical data to do early intervention care management is a common thing here.

That said, the company has to make sure that only the people that have a clinical need to access the data have access. So the developers would probably use a de-identified data set to write and test the program. Only the clinicians (care management and disease management nurses) would have access to the identified data so they can contact the patient to offer care.