I've had three incidents this year in which representatives from Town and Country Compounding have broken standard security and privacy protocol.
The first incident: I received a text on 8/8/22 from this business stating that my doctor had sent a prescription to the pharmacy. I called up the pharmacy on 8/8/22 at 2:10PM to follow-up. A male rep answered the phone. I asked him which prescription had been sent to the pharmacy. I didn't give him my name or any identifying information. After a brief hold, he returned and answered my question in detail, giving the name, number of capsules, and dosage of the drug in question. He began calling me by my first name (Steve). I asked him how he knew my name. He said that he saw my last name (which he verbally identified) on the caller ID and then looked up my information. Then I gave him my credit card number and purchased the drug.
In this incident the rep egregiously breached standard security and privacy protocol, and probably broke HIPAA law. Pharmacy reps should ask for the name, date of birth, and address for anyone requesting prescription information or making a drug purchase. Identifying a caller solely using caller ID is an unethical practice. My phone could have been stolen, in which case the thief would have learned my first and last name and all the details about my prescription. My phone has been stolen before, so this is more than a theoretical possibility.
The second incident: I called Town and Country at 1:16PM on 8/9/22. The same rep answered the phone by saying, "Hey Steve." Besides being unprofessional, this was another breach of security and privacy protocol. Had my phone been stolen, the thief would have immediately learned my first name. During this second call, the rep gave me his first name (Jesus) and identified himself as the person I had spoken to the day before. He wouldn't divulge his last name.
The third incident: I called the pharmacy on August 12, 2022 and recorded the first five minutes, seven seconds of this phone call. The phone was answered by a customer service representative. I asked her for some prescription information including dosage. She then asked, "What is the name?"
I told her my name and after a brief hold, she gave me detailed information about my prescription. She went on to answer a few more questions, and I eventually had a prescription or two filled (I stopped the recording before I gave my credit card information).
The problem is that the representative didn't ask for my date of birth or address. This is a breach of standard security and privacy protocol for pharmacies. I'm not targeting this particular representative, who was otherwise very helpful and professional, but rather Town and Country Compounding ownership and management.
These three incidents demonstrate that John Herr (owner of Town and Country Compounding) is indifferent to standard security and privacy protocol. A fraudulent caller who knows only your first and last name could easily obtain your prescription information from this pharmacy. If speaking to Jesus, the aforementioned Town and Country rep, the caller would need only your phone to obtain your first and last name and prescription information. Buyer beware. read more
