Can you publish studies based on confidential customer data that comes from private companies? I am working on a project in biostatistics involving some private companies.
Specifically, these companies share data about their customers with us and we try to apply our algorithm to this data. The good part is that both the algorithm and the application are very new, and seem to work quite well. Unfortunately we can not publish this data in paper or conferences, as it is privately owned.


What is the typical way to proceed in this case? 
Does the fact that it is not possible to publish the data implies in general that also results based on this data are also unpublishable?
Publishing data based on confidential private company data
Where the company consents, it is possible to publish studies based on confidential customer data. Common requirements are


Don't identify the company in any publication and possibly be broad when discussing the context of the company (e.g., location)
Don't make the raw data available to other researchers or on online repositories
Don't present individual-level analyses or small group analyses which might allow any customers or proprietary data to be identified


When you initiate a relationship with a private company to analyse their data, it is important to discuss and agree on a number of matters:


Are you able to publish research based on analyses of their data? (note that this can be done without sharing their raw data)
If you publish, to what extent do they require their details to be concealed? (e.g., no disclosure of place, companies, etc.)
How will authorship of publications work? Does anyone at the company wish to be a co-author? If so, what level of contribution do they need to make and how will this work?
What if any rights of veto or influence do they have on what can be published? Will you have academic freedom to publish results even if they do not support the company's commercial agenda?
Are you able to share their data with other researchers or on suitable online repositories?
Will they give you money or other compensation for analyses you perform or reports you write for them? If so, what are the details?


Types of Relationships:

In general, there are different kinds of partnerships between academia and companies that relate to the analysis of data. Relationships should be formed based on a shared understanding of goals and mutual benefit.


Pure consulting: In this context, while you are in academia, you can often still provide standard consulting services. In this setting, you would charge commercial rates to the company for any insights you gain.
Pure research: Data is shared with you by the company with the explicit aim of assisting your program of research. The company may be curious about the results, but is principally motivated by a general desire to assist in your research. The company does not have any explicit expectations about customised reports and so on beyond the research program that you pursue.
Hybrid consulting/research: In this model the company is seeking to gain insights into their business. Providing customised reports to them and other services may be part of the exchange for allowing you access to the data for research purposes. Alternatively, allowing you to publish research based on the data may be one of your conditions that may offset the fee you charge the company for other services you provide.


Within all these models, there are many variations. The important point is that early on in the relationship, you ensure that both you and the company agree on what model is being adopted. These matters can also be renegotiated.