ProPublica identified 187 servers in the US that store and retrieve medical data—and don't adhere to basic security precautions.