Gravar-mail: Who Owns the Data in a Medical Information Commons?