Thanks ATisketATasket! Thanks so much for replying... I sometimes wonder if I'm crazy, if I'm the only person out of 500 (!) who had an issue with this.

But the more I think about it, the more upset that I'm getting. Her saying that because her husband works in "identity management" they "take security very seriously" - I want to reply and say, "no, clearly you don't!" I'm googling, and there's a TON out there that talks about why sending any passwords (not just related to health info) via email is a really dumb idea.

Arghhhh... it's never easy!