Apple are the first to actually do this properly by cross-app tracking, forcing developers to outline data collection statements, and providing clearer sharing acceptance pages.
> Once BigTech has your data, they can do anything with it in the future (despite what they say today) because of the lack of appropriate law and regulation to prevent this.
This is entirely incorrect. HIPPAA and GDPR are very clear about PII health data, and a large corporate like Apple will be fined through the teeth violating it. Changes to the PP are communicated, and allow the user to opt out by discontinuing the service. Sure they’re sometimes opaque, but Apple has built a reputation on responsible data policies, which are frequently contrasted with those of other big tech data factories like Facebook and Google.
My understanding is that they’re more responsible than other services with respect to personal data. Unless I’m mistaken, their strategy isn't to monetise and sell data, but is instead to sell services that allow users to interact with their own personal data, which is incredibly rich given the ecosystem that Apple Watch and HealthKit offers.