On or Off Chain? How Will Blockchain-based apps deal with medical privacy?