47 comments

[ 3.0 ms ] story [ 92.7 ms ] thread
(comment deleted)
How did they get this data?
From the third sentence in the article:

> To conduct the study, Google obtained de-identified data of 216,221 adults, with more than 46 billion data points between them. The data span 11 combined years at two hospitals, University of California San Francisco Medical Center (from 2012-2016) and University of Chicago Medicine (2009-2016).

I know I'm not supposed to say 'Did you read the article?', so I won't say that.

It was rhetorical. As in: They're not supposed to have this, why are hospitals giving Google our data?
If you deidentify the data, you're allowed to use it for R&D purposes.
On top of this, getting access to this data surely required ethical approval from multiple institutions (IRB). I am getting pictures from a few patients and I had to have a whole security audit on how the information would be stored and secured, along with who would have access.
(comment deleted)
Yes, the approval of at least one IRB is also required.
de-identified is the key word here. That's how they attained the data in a HIPAA compliant way.

Yes there are problems with combining that data with other datasets to re-identify. Google would be in a rather good place to do that.

That de-identification is probably the absolute minimum they have to do to achieve compliance, but don't mistake it and think that the data is actually anonymous. We've seen many studies show that 90%+ of the people can be re-identified from such datasets.

Unless Google starts using fully homomorphic encryption or something similar, then you should consider that data non-anonymous. And until that happens, Google and national healthcare agencies should also require consent from the patients before giving the data to Google or any other company for such studies. Otherwise, I hope class action lawsuits will be started against both.

I'm not sure why you are downvoted about this.

I've went through 10 research papers on this very subject last week, all from 2016-2017, and this is a huge problem.

Just because google does it, people assume it's infallible, where in reality there are bunch of methods to deanonymize data, from machine learning to pure mathematical models on binary vs categorical inputs and such.

In this day and age, somebody will publish the deanonymized, cross-referenced (from voting registry or whatever) set online for free searching.

Then again, most people are fine with this, as long as their names aren't on the list, so considering it's 200k sample out of 323M population, at most 0.7% will be really outraged. Which may explain the down votes he's receiving. 99.3% names aren't on the list, and from that set they want the scoop on the rest of their neighbors.

Homomorphic encryption currently doesn't exist in any useful sense. So you are asking for the impossible. If we followed your advice, medical record research would be impossible. All research comes with risks. Society is all about balancing those risks with there potential benefits.

Come back with your criticisms when you have actual evidence of Google mishandling data or misleading the IRB boards.

> All research comes with risks.

And the core foundation of medical ethics is that the patient gets to decide if/how much of that risk to take.

> Google obtained de-identified data of 216,221 adults...

How much did this data cost?

I imagine the cost of the data, in this case, is negligible when compared to the cost of salaries and benefits for employees working on it.

Considering they have the ability to pick from thousands of hospitals and universities (the latter being where they actually got the data) they probably have a fairly large amount of leverage to keep the costs low.

Having been privy to some of the contractual details of deals that Google has made with other medical centers, I’m betting that they probably got it for ”free”, as in they didn’t directly pay a set fee to the universities. Google most likely provided funding in the form of donations (tax write off), free cloud compute resources and/or cloud storage (write off), and the opportunity for university researchers to co-author high impact publications (everybody wins).

Also, 200k patients is actually kind of small. Granted this dataset is far more granular/robust than what you’d typically find in commercially available healthcare datasets, but to give you some frame of reference, the healthcare datasets I work with contain > 20 million individuals (again, with orders of magnitude fewer features).

As one of the apparently few remaining people on HN who like Google and are excited about the technology they're producing, I applaud this effort. I've had multiple doctors in my life who were worse for my health than seeing no doctor at all. Two of them outright looked up my symptoms (in a book in one case, and some shitty intranet in the other) to tell me what I already knew from googling it myself. We can do better than that. This is the way forward.
Agreed. I've had a doctor google my symptoms in front of me.
until you realize its going to be people like insurance companies using this data to deny coverage and other stuff aimed soley at profiting on the people its harvested from.

How much benefit does the average person get from being profiled like crazy across the web? Besides the (dubious) benefit of free services, there isnt much positive you can point to from such activity, and a shitload of really scummy exploitative crap.

I dont see how such medical analysis is really going to pan out much differently at scale.

Here in socialized Europe it will be very beneficial. Our health system focuses on solving problems, not selling us stuff. So this will be another great tool assisting with making us aware of what options we have in improving health outcomes.
Plenty of private for profit providers in europe too.
Yes, but since the mainstay of the financing isn't really based on private insurance coverage, the main objection doesn't apply. Really, denying insurance is pretty much the only legal-but-bad use case for such information. All other legitimate uses are good for the patient, balanced by an increased risk of crime and loss of confidentiality that may be embarassing but not profitable for anyone (well, except if there's some blackmail case).
"all other legitimate uses are good" is a tautology
No, saying that they're good for the patient is not a tautology as there certainly could exist legitimate uses that are good for someone else at the patients expense.
You can no longer deny coverage in the US, barring a change to the law (which could happen).
The Affordable Care Act, and most replacement bills proposed over the last year, protects you from this type of discrimination.

Health insurers can't deny you coverage or raise prices due to any pre-existing health condition. By law, an insurer has to offer the same rate to everybody with the same age, zip code, and smoking status.

Insurers are allowed to rebate up to 30% of your premiums if you take healthy actions (e.g., going for a run, joining a weight loss program, medication adherence), as long as those actions don't discriminate based on health status.

(comment deleted)
I wish more doctors would look things up or use computers to help diagnose. Relying on their personal memory and experience alone seems outdated and less effective.

Combine that experience with some good reference, research and consultation with lots of other doctors and you would have a much better outcome overall.

When we go to talk to doctors to talk about a situation in Turkey, if you just say "I looked it up internet" they interrupt you, and talk about how you can not understand anything, they treat you like an idiot and show no respect. I imagine they might be exhausted by uneducated or nervous patients, but this is not the way to go to undermine a person's knowledge.

I do not complain when IntelliJ autocompletes my lambda function in Java 8 and get defensive and yell at the IDE. (Excluding who prefer no assist code editors)

I value a doctor's ability to filter the search results. I Google technical problems all the time, what would my clients say? But it's my ability to score the answers and (hopefully) sift through the chaff that makes my time valuable, not whether or not I use Google.

We lament unrealistic conditions in white board interviews without Google, but have surprising double standards when it comes to medical professionals.

> As one of the apparently few remaining people on HN who like Google and are excited about the technology they're producing

Lol, as someone who criticized Google on multiple occasions, just wanted to point out that it’s OK to call them out when they (may be) wrong and still like their technology.

What's the problem? Nobody is going to memorize every single piece of relevant information, and they're certainly not going to memorize all the changes over time.

I'm thrilled that my GP is willing to slog through research, or look up things she's not 100% sure of. Sure, I've got access to much of the same information. She's got the training to interpret it though. We were discussing vitamin supplements and fortification at our last visit. I wasn't entirely sure about a couple of the claims she made, so I dug up some articles and emailed them to her. A couple days later I got a response with an interpretation of the articles (essentially, nothing to worry about).

Or, how about this? I've got a rare variant of a fairly common condition (such that a GP probably wouldn't see this firsthand). I'd seen a specialist at a world renowned hospital before. Those visits were expensive and not very informative. Visit with the GP? Huh that's unusual, let's see what the options are. Her conclusion? You can go through a variety of expensive tests, but unless I'm symptomatic the best course of action is no action. Now, I was curious, so I looked all that up after the visit. Fuck if I know how to discern how expensive those tests are or whether or not I'd see any benefit. There's a ton of information out there, but the big bucks are spent on people who a.) know how to find it and b.) how to interpret it.

To bring it to a tech setting -- let's think about Jenkins. I've cobbled together a build pipeline for chef cookbooks for one of our apps across our prod and non-prod environments. Sure, we pull credentials from the Jenkins credential store. No, I can't tell you off the top of my head the exact syntax to pull a secret out of there. But I can tell you where I'd look for instructions. Being able to be productive with Groovy (yuck) is part of my job, but it's not the only part of my job. Being able to find the relevant information is far more important than having to memorize it.

Just a note: The edition of Apache Groovy that's bundled with Jenkins has its collections API crippled, so it provides a less "functional" experience than when Groovy's used for normal scripting. Given that easy access to the map-reduce-filter paradigm is the main reason I'd give up static typing to use Python/Ruby/Groovy, I don't know how you put up with it.
Well, what other languages aside from Groovy give you access to the pipeline "api" in Jenkins? AFAIK there's not a lot of choice in the matter there.

Honestly though the biggest problem I have is that there's nearly zero pipeline documentation for Jenkins. The language itself is neither here nor there (but by virtue of not being a Java guy, I don't have a particularly robust development environment setup).

(comment deleted)
I have very little hope for this succeeding, although I hope it does.

I say this because this problem is vastly more complicated than people believe for the following reasons:

* A substantial amount of data about patients is encapsulated in clinical notes which are free text. There is no standard format for notes; notes wildly vary in terms of quality, detail, and accuracy; and notes are full of non-standard abbreviations and clinical shorthand.

* A large amount of the data in an EHR is incomplete or incorrect. Information may be out of date or recorded incorrectly. Patient medication lists are a great example of this, and they frequently cannot be trusted by physicians even during the course of a single hospital stay (medications are started or discontinued without being properly recorded). Then there is the issue of non-adherence: patients frequently claim to be adherent to treatment regimens that they are not actually adherent to which is going to distort outcome data. In fact, the majority of people are non-adherent for many different treatment regimens. More generally, diagnoses may have been incorrectly determined and data may be incorrectly labeled or missing.

* Data exists all over the place even within an EHR, let alone across facilities. I myself have been to at least 5-10 hospitals and more outpatient clinics over my life, none of whom share data with each other. No one entity has all the relevant data about a patient, including insurers, specific care teams, or the hospital systems they got this data from.

* Data placed into a EHR may be intentionally falsified for simplicity or to get insurance coverage. It is not uncommon for physicians to intentionally misdiagnose a patient so their insurance will cover a diagnostic / treatment / procedure, or to input a less specific diagnostic code to save time when a more specific one is available.

Trying to train with data sets this fucked up is an enormous challenge.

I feel like Google have the power behind them to try to at the very least data mine the free text data for information. Possibly they even have enough sway to convince doctors and other individuals towards a form that is far less random, or at least to provide a platform to share information between patients. Note that NLP seems to have come a long way in five years, who knows where we'll be in a decade or more.

In terms of incorrect records, I'm not sure this would be a major problem over a large dataset. Making this up, but I imagine the range of errors is fairly random across all fields and with enough data you can always identify an approach that appears to save a life more than some other approach, even if the diagnosis is incorrect.

Although I totally agree with you that this is going to be an enormous challenge for Google, I feel like it would be underestimating them to assume this has very little hope of succeeding.

I agree that if Google throws enough money and talent at the problem then they can certainly make improvements, but I seriously doubt that they are going to create some sort of revolutionary clinical decision support system which is going to massively improve outcomes.
All of these points are not fundamental problems. Researchers are not writing expert driven rules where the "raw" accuracy of structured data is that important.

The only important part is making sure that the training labels are accurate. If the training data has inaccuracies, the model should learn to work around them (with some accuracy cost). The main question simply is how much signal is in the data. And that's hard to predict in advance (see the recent surprising results about predicting sexual orientation from faces).

>> And that's hard to predict in advance (see the recent surprising results about predicting sexual orientation from faces).

Those results were not so much surprising, as coerced. For example, training data included an equal amount of men of both sexual orientations and the same for women- an equal distribution, in stark contrast to the one in the real world. This was clearly done to overcome the inevitably poor accuracy when training with unbalanced classes.

In short: don't base anything on that paper, for it was a steaming pile.

Bingo. Healthcare data is so unorganised its not even funny. That's often why you see machine learning medical leaps in really niche areas, like making a diagnosis based off an MRI scan etc. I think if this does succeed, it will succeed in an equally niche area, such as with a specific system, in a specific clinical environment.
The veracity of any analyses is directly correlated to the quality of the input. I have no doubt that Google's methods are state of the art. My concern is with the input those methods were fed. Sample size needs to be much, much larger on a patient population basis.
If this is for personalized recommendations about the Diagnosis or Plan for a particular patient based on past medical record history on that patient, this might be something that a hospital would want integrated into their current environment.

If this, however, is something that takes multiple patients records into consideration, this would most likely never see the light of day. Most hospitals don't want anyone knowing that, for instance, their city has the highest number of leukemia related deaths per capita than any other city in the US.

Doesn't the CDC know that anyway?
Electronic bureaucracy has been developed to replace 1 or 2 brains plus paper records. However, put simply, it doesn't work.

(e.g. I had to give my address three times to the same outfit last month just to get a flu jab.)

But we can't go back to paper records so we'll try building a giant brain (AI) to try to decipher and manage millions of electronic records. Trouble is that that brain still won't have written the records or talked with the people they're about. So I doubt it will work.