Differential privacy in health research: A scoping review | Synapse