Google is certified and runs the biggest medical database with (I believe without googling this) the biggest hospital operator in the USA.
I have a condition which is rare enough that it doesn't get enough funding and data is missing
That doesn't matter _at all_ when the government comes knocking at Google's door - in the best case, they have a subpoena that can at least be appealed afterwards, in the worst case it's DOGE teens backed by a bunch of heavily armed guys in camouflage.
This has become an issue big enough that the US company I work for is actually removing data from US cloud providers to make it harder to get at. The European divisions have started data sovereignty projects because it's now a principal risk.
I'm out of the cloud as well.
Which is evidentially not this lot. Not even remotely.