The issue of consent kinda seems to point towards the medical practice.

> Phreesia attributes a source of their confusion to a blank authorization form they received on one occasion where the staff checked me in manually

The focus of this article should be on the wild fact that someone else signed a consent form on their behalf to have their medical data shared...

Dark patterns are certainly an important issue, but should anyone other than the patient themselves even be able to fill out a form like this in the first place?