Analysing health records without exposing sensitive information