Something super creepy that happened to me recently: a hospital where I've been to a few months ago called me and asked me to participate in some DNA analysis program. They said "oh and the best part? You don't need to do anything! We will use blood samples we collected the last time." I obviously declined, but it was a huge wtf to me - they stored biological samples associated with me without informing me and can do…
Well they did call you and tried to trick you into letting them use it. But assuming they obey the law they did not used your samples. So there are privacy laws in place? Also they could have been cleaning old results/samples and this was one step.
THere isn't anything nefarious going on here. Just scientific research with medical data.