Without reading the Business Association Agreement it is hard to determine if Google has 'Acceptable Use' of healthcare data. Storing in the cloud is one thing, allowing a Business Associate to siphon that data for other use is another.