Medical diagnosis AIs can be tricked into telling whose data trained them