The service provider acts as a processor on behalf of the data provider, who is the health data holder and controller of the health data.