It still sounds sketchy since it sounds like your data is maintained at a 3rd party for a purpose that is not intended (unrelated to your care) on the idea that you may one day opt-in to the unintended use.
We are all most likely explicitly authorizing this activity in the reams of fine print you sign without reading or otherwise accept by agreeing to service by your local hospital group or pharmacy combine.