PAC: Privacy-preserving arrhythmia classification with neural networks