If it's implemented correctly. How many top tech companies implement their API's perfectly the first, second, or even hundredth time around? Walgreens isn't a tech company.
As the patient, the person who's information is being stored, I should have the ONLY say so over what happens to that information EVER, and if they don't get that, I have no problem taking my business elsewhere, which it looks like I'll have to do.
To clarify, our Rx Refill API is "inbound" in nature only. If the patient initiates a refill, one can be completed. This is not an API around "outbound" information from Walgreens systems. Hope that helps to clarify.
All they give out is the store location/pickup time for an RX# request, no identification info, no medication info.