You're right. This notification should be mandatory. However, even without using AirClinic, just by using Google one can find any medical information one wants to have or not to have. it's always the user's responsibility to handle the information right.