Staff from controversial tech company have been given ‘unlimited access’ to identifiable patient data