Using electronic health records to understand COVID-19 risks