It is possible that patient information could be shared and used to train one of Amazon’s artificial intelligence algorithms. Again, it depends on the agreement. The HIPAA Privacy Rule does require written authorization before someone’s health information can be used for marketing, but what constitutes “marketing” is not as straightforward as one might think.