As hospitals have moved to electronic health records, independent analytics firms have started buying hospital data sold without patient names.