The telehealth and discount drug provider promised health data would remain confidential and then allowed it to be used for targeted ads.