Healthcare exchanges in Nevada, Maine, Massachusetts and Rhode Island shared users’ sensitive health data with companies like Google and LinkedIn.