Drug companies are sharing their data — but few are looking