Does this mean insurance companies are interested in this heart rate data stream, and are making inferences from it? Are they already collecting it? Do any of these wearables provide this data to these companies without the user's express permission?

Is this a good thing?