How is “confirming my address” to a receptionist enough verification for all medical professionals to be like “yes this information is secure”