> but the doctor shouldn't be able to sell my data, nor correlate it with their other patients' data

This definitely happens, at least in the UK. With anonymised data.