Anonymized data doesn't always protect privacy. Entrepreneurs must understand the risks of re-identification.