If Google is getting Protected Health Information (names, addresses, dates, etc.) from providers then they have to sign a Business Associate Agreement, which effectively makes them a covered entity under HIPAA. They would be criminally liable for any misuse of the data, which would include using it to inform their advertising.

Using the data to create a model for use at the providers would be a clearly proper use of the data. That's standard practice across the industry.