Apparatus and methods for causing selection of an advertisement based on prevalence of a healthcare condition in a plurality of geographic areas

1. A computerized method of causing selection of an advertisement message based on the prevalence, in each of a plurality of geographic areas, each geographic area having a plurality of separate addresses, of a healthcare condition of interest, which healthcare condition is one of a plurality of possible healthcare conditions, comprising:

at a computer system controlled by the first entity:

(a) in response to receiving, from a second entity, first data, derived from personal healthcare information, that comprises a healthcare condition code linked to a plurality of individual keys, each individual key identifying one of a plurality of persons and indicating that the person identified by the individual key has a first unidentified healthcare condition associated with the healthcare condition code:

(i) matching, based on the individual keys, the first data and second data that associates a plurality of geographic identifiers with the individual keys, each geographic identifier being associated with one of the plurality of geographic areas, to indicate respective geographic areas for individuals of the plurality of persons, and

(ii) for a plurality of the geographic areas, calculating a numerical value based on the number of persons in the geographic area associated with the healthcare condition code;

(b) after confirming that the first entity no longer has access to any data associating the individual keys with the health care condition code, sending an electronic certification to a third-party computer;

(c) receiving from the third-party computer, in response to the certification, decoding data that identifies the first healthcare condition;

(d) decoding the healthcare condition code with the decoding data;

(e) storing the numerical value calculated for each of the plurality of the geographic areas in part (a)(ii) linked to indicia of the first healthcare condition; and

(f) causing selection of a message for display on a consumer device based on one of the stored numerical values for one of the geographic areas, which geographic area is associated with the consumer device.

2. The method of claim 1 wherein the one of the geographic areas is associated with the consumer device based on an IP address of the consumer device.

3. The method of claim 1 further comprising receiving, from a third entity, a certification that the process implemented by the computer system of the first entity is, as to the first data of the second entity, in compliance with the privacy regulations.

4. The method of claim 1 wherein the geographic areas are areas identified by Zip+4 codes.

5. The method of claim 1 wherein the geographic areas are city blocks.

6. The method of claim 1 wherein the geographic areas are multi-unit buildings.

7. The method of claim 1 wherein the first data is known to the first entity and the second entity to contain some falsified data records, but the first entity does not know which records of the first data are the falsified data records.

8. The method of claim 1 wherein the first data is known to the first entity and the second entity to be missing data records that associate the healthcare condition code with any of the individual keys that identify one of the plurality of persons who is the only person that has the first healthcare condition in that person's associated geographic area.

9. The method of claim 1 wherein the first data is known to the first entity and the second entity to be missing data that associates the healthcare condition code with a subset of the individual keys, each of the subset identifying one of the plurality of persons who are associated with any one of the geographic areas for which all of the persons associated with the geographic area have the first healthcare condition.

10. The method of claim 1 wherein the numerical value is a percentage.

11. A computer system, controlled by a first entity, for causing selection of an advertisement message based on the prevalence, in each of a plurality of geographic areas, each geographic area having a plurality of separate addresses, of a healthcare condition of interest, which healthcare condition is one of a plurality of possible healthcare conditions, the computer system programmed:

(a) in response to receiving, from a second entity, first data, derived from personal healthcare information, that comprises a healthcare condition code linked to a plurality of individual keys, each individual key identifying one of a plurality of persons and indicating that the person identified by the individual key has a first unidentified healthcare condition associated with the healthcare condition code:

(i) to match, based on the individual keys, the first data and second data that associates a plurality of geographic identifiers with the individual keys, each geographic identifier being associated with one of the plurality of geographic areas, to indicate respective geographic areas for individuals of the plurality of persons, and

(ii) for a plurality of the geographic areas, to calculate a numerical value based on the number of persons in the geographic area associated with the healthcare condition code;

(b) after confirming that the first entity no longer has access to any data associating the individual keys with the health care condition code, to send an electronic certification to a third-party computer;

(c) to receive from the third-party computer, in response to the certification, decoding data that identifies the first healthcare condition;

(d) to decode the healthcare condition code with the decoding data;

(e) to store the numerical value calculated for each of the plurality of the geographic areas in part (a)(ii) linked to indicia of the first healthcare condition; and

(f) to cause selection of a message for display on a consumer device based on one of the stored numerical values for one of the geographic areas, which geographic area is associated with the consumer device.

12. The computer system of claim 11 wherein the one of the geographic areas is associated with the consumer device based on an IP address of the consumer device.

13. The computer system of claim 11 wherein the computer system is programmed to receive, from a third entity, a certification that the process implemented by the computer system of the first entity is, as to the first data of the second entity, in compliance with the privacy regulations.

14. The computer system of claim 11 wherein the geographic areas are areas identified by Zip+4 codes.

15. The computer system of claim 11 wherein the geographic areas are city blocks.

16. The computer system of claim 11 wherein the geographic areas are multi-unit buildings.

17. The computer system of claim 11 wherein the first data is known to the first entity and the second entity to contain some falsified data records, but the first entity does not know which records of the first data are the falsified data records.

18. The computer system of claim 11 wherein the first data is known to the first entity and the second entity to be missing data records that associate the healthcare condition code with any of the individual keys that identify one of the plurality of persons who is the only person that has the first healthcare condition in that person's associated geographic area.

19. The computer system of claim 11 wherein the first data is known to the first entity and the second entity to be missing data that associates the healthcare condition code with a subset of the individual keys, each of the subset identifying one of the plurality of persons who are associated with any one of the geographic areas for which all of the persons associated with the geographic area have the first healthcare condition.

20. The computer system of claim 11 wherein the numerical value is a percentage.