Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

peacebird

(14,195 posts)
Wed Dec 16, 2015, 10:09 AM Dec 2015

Went to a DocInABox last night. Gave them my ID & insurance card

They asked for my SSN, I asked how secure their database was and if it was required, since they had my insurance and ID. It wasn't required, and they had no idea what I meant by secure (she said "we don't give out patient information" - sigh)
Then they asked for my address, which I gave, and phone number. Then my email, again I asked why, is it required for some reason? I did not give it to them.

Is it just me or is it incredibly stupid for places to ask for so much unneeded info to put into their UNSECURE database? If people give that much info then these DocInABox places must be great targets for data & identity theft, because clearly they have noone there who understands firewalls or data security. I bet their data isn't even hashed.

10 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
Went to a DocInABox last night. Gave them my ID & insurance card (Original Post) peacebird Dec 2015 OP
Good move. No SSNs unless it is mandatory and required by law. Buzz Clik Dec 2015 #1
Why would they worry about doc in the box when... Blus4u Dec 2015 #2
No one hacked TurboTax. Dr Hobbitstein Dec 2015 #8
No data is safe. Facility Inspector Dec 2015 #3
We got hit by the US Govt OPM breech already.... peacebird Dec 2015 #7
SS numbers are collected to make bill collection easier... Human101948 Dec 2015 #4
They already had my insurance, address, and ID. peacebird Dec 2015 #6
If they are a health provider, they are affected by HIPAA and have had to put a number of things in stevenleser Dec 2015 #5
All sorts of places ask for SS #..I always refuse and they give up dixiegrrrrl Dec 2015 #9
Mine's already been stolen 3x that I know about. jeff47 Dec 2015 #10
 

Buzz Clik

(38,437 posts)
1. Good move. No SSNs unless it is mandatory and required by law.
Wed Dec 16, 2015, 10:16 AM
Dec 2015

Even that won't protect you, but no sense giving it away.

Blus4u

(608 posts)
2. Why would they worry about doc in the box when...
Wed Dec 16, 2015, 10:18 AM
Dec 2015

...they have been successful hacking turbo tax, target, Home Depot, the US gov't, and countless other reservoirs of data.

Peace

 

Dr Hobbitstein

(6,568 posts)
8. No one hacked TurboTax.
Wed Dec 16, 2015, 11:34 AM
Dec 2015

There were fraudulent returns filed, but the info was acquired by other means.

The rest is spot on, however.

peacebird

(14,195 posts)
6. They already had my insurance, address, and ID.
Wed Dec 16, 2015, 10:34 AM
Dec 2015

Not sure I care about making bill collection easier since I always pay mine.

I do care about identity theft tho

 

stevenleser

(32,886 posts)
5. If they are a health provider, they are affected by HIPAA and have had to put a number of things in
Wed Dec 16, 2015, 10:30 AM
Dec 2015

place to safeguard patient data.

Most health organizations use one of the larger medical database services that are known to be pretty secure.

Of course there is nothing for sure these days regarding data security.

dixiegrrrrl

(60,010 posts)
9. All sorts of places ask for SS #..I always refuse and they give up
Wed Dec 16, 2015, 11:44 AM
Dec 2015

usually I say "are you hiring me? Cause that is the only reason anyone needs my number".

Most medical places use birthdate, I have found.

jeff47

(26,549 posts)
10. Mine's already been stolen 3x that I know about.
Wed Dec 16, 2015, 12:43 PM
Dec 2015

Makes it easier to no longer care if they collect it.

Latest Discussions»General Discussion»Went to a DocInABox last ...