Gravar-mail: Revealing the spatial distribution of a disease while preserving privacy