Here is the privacy statement from the company running this effort.
You are rightfully concerned with providing the info, as was I.
The company is legit. The process is suspect.
Here is more information about their concerns for privacy:
Privacy Policy | Access2Care