I had the strong urge to scroll down that page to see if there's anything more to this site: who made it, legalese, etc, but no. While it claims data safety and privacy...

Yeah, that smells amateurish. Maybe OP can code well, maybe they have domain knowledge in healthcare, but damn, definitely utterly clueless in the legal area.