New 'wellness' profile violates privacy rights