Kaiser Permanente settlement highlights how health websites collect and share user data and what privacy protections really apply online.