Putting all your health records in one electronic place sounds like a great idea. But how do you control who can see the information?