What is Android's 'Health Connect' permission model, and how does it implement the principle of data minimization for health data?

• A.Health Connect stores all health data in HealthKit format that only specific HIPAA-certified apps can access, with minimization enforced at the HealthKit API layer
• B.Health Connect uses a single READ_HEALTH_DATA permission that grants access to all health records; minimization is achieved by the user reviewing a health dashboard and revoking individual data types post-grant
• C.Health Connect uses OAuth 2.0 scopes delivered over HTTPS to the app; the server-side scope validation minimizes data exposure without requiring Android permissions
• D.Health Connect uses per-data-type permissions (e.g., READ_HEART_RATE, WRITE_STEPS, READ_SLEEP) so apps only access the specific health metrics they need; a step counter app gets READ_STEPS/WRITE_STEPS but not READ_BLOOD_PRESSURE - minimizing exposure to sensitive health information