Went to a DocInABox last night. Gave them my ID & insurance card [View all]

[peacebird]

They asked for my SSN, I asked how secure their database was and if it was required, since they had my insurance and ID. It wasn't required, and they had no idea what I meant by secure (she said "we don't give out patient information" - sigh)
Then they asked for my address, which I gave, and phone number. Then my email, again I asked why, is it required for some reason? I did not give it to them.

Is it just me or is it incredibly stupid for places to ask for so much unneeded info to put into their UNSECURE database? If people give that much info then these DocInABox places must be great targets for data & identity theft, because clearly they have noone there who understands firewalls or data security. I bet their data isn't even hashed.