No Aggregation Without Representation: Patients, AI, and the Fight for Data Rights

What happens when patients become the product—and no one asked for consent?

In this episode of HIT Like a Girl Pod, Grace Vinton sits down with Andrea Downing, a security researcher and co-founder of The Light Collective. Andrea's journey into patient advocacy began in 2005, when she tested positive for the BRCA1/2 gene mutation at age 30. That moment transformed her from a tech professional into what she calls an "accidental hacker"—someone who started asking hard questions about who owns patient data, who profits from it, and who gets left behind.

Andrea and her team at The Light Collective are advancing a simple but radical idea: "No aggregation without representation." It means patients deserve a seat at the table—not just as research subjects, but as decision-makers in how their data is used, shared, and protected.

Together, Grace and Andrea explore:

• How Anthropic's Claude Mythos and Project Glasswing are exposing vulnerabilities in healthcare systems

• Why hospitals are facing ransomware shutdowns—and what that means for patients

• The rise of "vibe coding" and what happens when patients build their own tools without privacy guardrails

• The hidden dangers of ad tracking (Meta Pixel) inside patient communities

• How misinformation and privacy gaps are putting patients at risk

This is a conversation about power, data, and who gets to shape the future of healthcare technology. If you are a patient, a caregiver, or anyone who believes patients should have a voice in how their data is used—this one is for you.

Listen. Then ask: Who speaks for you?