A rushed process for launching a COVID-19 screening site leaves lots of data privacy and security questions unanswered.