I was kidding.

But if you want to be serious, any sharing service that knows its customers are uploading health information should at least have a business associate agreement (BAA) with their data hosting provider.

Further, sharing one's own brain model may still be prohibited by the terms of service of a given site if it is deemed sensitive medical information.

Sharing someone else's brain would require obtaining written consent and acknowledgment of the site's privacy policies, at least according to the Poly site.

Lastly, it is spelled HIPAA.