>but can verify the transactions to the drug site themselves
Once you start selectively give out user data, you are basically giving out warrants yourself and acting as a judge.
Once you start selectively give out user data, you are basically giving out warrants yourself and acting as a judge.
Now what's morally ambiguous is then deciding to reveal that data to others, and if you did it indiscriminately for all customers I'd be against it. But on a small scale, I don't think it's so wrong.