Handing over your government ID is routine at an Oklahoma dispensary — the law requires shops to confirm you're a valid medical-marijuana patient. But "verify my license" and "store and share my data" are not the same thing, and you're allowed to ask about the difference. Here's a short, polite script.

What the law actually requires

To sell to you, a dispensary needs to confirm your OMMA license is valid. That's it. Anything beyond that — building a profile, attaching notes, sharing "warnings" with other stores — is the software's doing, not a legal requirement. (More on how that works in our patient-privacy guide.)

Questions you can ask

  • "Do you keep a profile on me, and what's stored in it?"
  • "Is any of this shared with other dispensaries or a network?"
  • "If something gets attached to my profile, will I be told, and can I see it?"
  • "What point-of-sale system do you use?"

You're not being difficult — you're being an informed patient. A good shop will answer plainly.

If you don't like the answers

You can choose to shop elsewhere, and you can ask that a profile not be created where possible. If you ever discover a false flag tied to your name, our letter generator will draft everything you need to demand its removal. You may also want to know how to tell if your dispensary shares your data.