Dispensary block lists & your privacy: FAQ

The state registry only lets a dispensary verify that your OMMA license is valid. But some point-of-sale software can let one dispensary attach a "block" or warning note to your profile that other, unrelated dispensaries on the same vendor’s network can see when they scan your ID. IndicaOnline documents exactly this feature in its own help materials.

No. These are private, vendor-run databases inside point-of-sale software — not the State. OMMA does not host inter-dispensary "warning" or "block" lists; its registry only lets a shop verify your license. If a shop tells you a flag comes from "the state," that is not accurate for these network blocks.

According to the vendor’s documentation, only a dispensary (or the software vendor) can remove an entry — there is no self-service way for the listed person to see, dispute, or delete it. That lack of any appeal is one of the central problems. If an entry about you is false, you can demand its removal in writing; our free letter tool drafts it for you.

It’s complicated, and we won’t overstate it. A private business generally may decide who it serves. But if a false "reason" is attached to your name and shared with other businesses, that may be defamation or false light under Oklahoma law (12 O.S. § 1441; the false-light standard in Colbert v. World Publishing Co.). And the practice raises consumer-protection questions. A similar merchant database (LexisNexis "Esteem") was challenged under the federal Fair Credit Reporting Act and suspended.

There is no public master list. A shop’s use of IndicaOnline’s online ordering (its Potify/Sweede storefront) is a sign it runs on IndicaOnline, but a shop can also use the software only at the register, leaving no public trace. We don’t publish accusations that any specific shop has flagged anyone.

No. Using the software is not the same as flagging anyone. Many dispensaries are careful, patient-first businesses, and a shop can even be a victim of this feature — turning away a good customer over a flag it can’t see or verify. We describe what the platform can do, never what a specific shop did.

A point-of-sale feature that lets one dispensary block or flag a customer across every other business on the same software network, keyed to the customer’s scanned state ID. Unlike a single-store ban, a network block follows the customer to unrelated dispensaries they may never have visited.

Almost certainly not — standalone dispensaries generally aren’t covered by HIPAA, so it usually doesn’t apply. The fair question is different: a vendor marketing itself as "HIPAA certified" (a label no agency issues) while running a feature that spreads patient data raises a truth-in-advertising question, not a HIPAA violation.

Stay calm and get the details (which store, whether it’s a network block, the exact "reason"). Then send a written removal and records request, file a free OMMA complaint, and — if the reason is false — consider a demand letter and complaints to the FTC and CFPB. Our free tool generates all of these for you. Acting promptly matters: Oklahoma’s deadline to sue for libel is generally one year.