Gravar-mail: Not the doctor’s business: Privacy, personal responsibility and data rights in medical settings