They need to be. Any form that collects health information must be encrypted, transmitted securely, and handled by systems covered under a business associate agreement. A standard contact form that quietly emails patient details in plain text is a common and serious gap. We build and configure forms so patient information is protected from the moment it is submitted.