perhaps "data stewardship" instead of "patient-owns-the-data"?