Almost noone is really "evil" in this stereotypical way, it is a thoroughly unhelpful way to view these things, it's more like criminal negligence that people who work for the government to handle medical data still don't know or don't care that google analytics sends data to google after 20 years of google analytics existing, and that the government as a whole does not have systems in place to enforce data privacy and hold people accountable who violate it.