“Most digital health tools and wearables are not considered "covered entities" under HIPAA, meaning users should have no expectation of privacy for their health data.”