A multi-institution evaluation of clinical profile anonymization