Fitness tracker health data — heart rate, GPS location, and sleep records — falls outside HIPAA, meaning a government ...