I was just looking at the SSL labs rating on the web site. It only gets 'C'.
https://www.ssllabs.com/ssltest/analyze.html?d=picnichealth....
Considering how private the information is, I would expect security to be a top priority. I would require at least an 'A-' on the rating. I realize that this does not indicate what is on the back end.