Health apps could face big fines if they don't disclose priv