Just FYI, it looks like they are showing the source from the current, inactive, survey. I visited it (in a private window) and none of that is showing up. Pretty sure if people are getting phished that it's someone posting a different similar looking link or something. It's CSS anyway, not JS.

And HIPPA (not HIPAA) says nothing about asking to disclose medical information. I don't know ehy people conflate this so much. It means you have control over where and how your medical information is shared. IDK what drugs are referred to but if they aren't prescription they are even less covered.

I switched to Tidal. Not for whatever Drake is on about but it's a better platform and isn't surrounded by controversy.