The company providing the forms for EZ WEED may be able to be HIPAA compliant but the EZ WEED website is definitely not HIPAA compliant.
And if you have an AZ MMJ card is not HIPAA protected information! Your MMJ card status is semi-public information pursuant to Arizona Revised Statute (ARS) §36-2807(A), "...employers may use the verification system only to verify a registry identification card that is provided to the employer by a current employee or by an applicant who has received a conditional offer of employment."
As anyone who has been to the doctor in the last couple of decades knows, the first thing they do is make you read and sign their declaration of HIPAA compliance which includes how they can use your data, who will see it and how they protect it. EZ WEED has none of this in their website. EZ WEED would need to have you sign a HIPAA compliance form before they collect any of your data. They don't do that!! They don't have any HIPAA info anywhere on their website!!
And they certainly need to get this information out there before they sign up anybody or place an AGM in a dispensary. It's easy to file a complaint:
News 
Market Data 
Discover 
