We put Dr. Ansay through its paces – from ordering to the questionnaire to delivery. The provider scores with speed: prescription within a few hours, cannabis in the mailbox in two days. But when it comes to security, alarming gaps appear. No email verification, expired IDs are accepted, and the medical questionnaire can be circumvented with a few clicks. Here is our experience report.
Order Process: Unusual Start via the Shop
Unlike most providers, the journey with Dr. Ansay does not begin with a medical consultation, but directly in the shop. If you select "Cannabis Prescription" on the homepage, you land on a product overview with various THC-containing cannabis flowers – and must first add three varieties to the shopping cart before proceeding.
First Choose Products, Then Request Prescription
The logic is unusual: You choose your cannabis flowers as if you were shopping in a classic online store. At least five grams per variety, up to three different varieties per order, a maximum of 100 grams in total. Only then are you asked if you already have a prescription – or would like to request one. We choose "No, request prescription" and book the initial prescription for 14.20 Euros. The process seems like a reversal of the usual procedure: product before examination.
Registration without Email Confirmation
[Note from 19.02.2026: This security vulnerability has since been fixed.] For registration, first name, last name, email address, date of birth, mobile number, and password are requested. What is striking: After registration, there is no confirmation of the email address. No verification link, no security step. You are logged in immediately and can proceed. For a medical service that processes sensitive health data, this is a remarkable gap.
Questionnaire with Visible Exclusion Criteria
The medical questionnaire comprises six steps. First, you select a complaint – from sleep disorders to chronic pain, neurodermatitis, or PTSD. We choose sleep disorders. On the second page, you are asked about the timing of symptoms. Here the first problem arises: Certain answer options are highlighted in red. If you select "1-7 days ago" to "1-3 months ago," the message immediately appears: "Sorry, you cannot become a cannabis patient." The exclusion criteria are thus visible from the outset – and can be deliberately circumvented.
Medical Examination: Fast, but Superficial
The questionnaire guides you through further questions about the frequency of symptoms, previous diagnoses, and prior cannabis prescriptions. Here, too, the "wrong" answers are highlighted in color. Anyone who wants to go through the process knows exactly what to click – and what not to.
Six Steps with Predefined Answers
Page five lists exclusion criteria: psychoses, severe cardiovascular diseases, suicidality, work as a driver. Here, too, the "No, not me" button is highlighted in red – the warning is unmistakable. We confirm instead that we do not meet any of the criteria. The same applies to the sixth page, which asks about taking certain medications. Anyone who avoids the red buttons gets through. An individual examination does not take place.
Expired ID Accepted
After the questionnaire, an identification document is requested. The instructions are clear: identity card in landscape format, name and date of birth clearly visible. We upload an ID that expired in 2022 as a test. The system accepts it without question. Here, too, a plausibility check is missing, which should actually be standard for a medical provider.
Prescription Issued in Under Three Hours
At 5:38 p.m., we request the prescription. At 8:13 p.m. – less than three hours later – the confirmation arrives via email: The prescription has been issued and forwarded to the pharmacy. The speed is impressive. The question of how thoroughly a medical examination can be carried out in this time remains open.
Delivery and Processing: Smoothly via Partner Pharmacy
The next morning at 7 a.m., MYCANNABIS Pharmacy contacts us via email. The prescription has been redeemed, and the order can be completed. This requires another customer account – this time directly with the pharmacy.
Second Customer Account Required at MYCANNABIS
Registration with the pharmacy is separate. Here, personal data is requested again, and the total amount for the cannabis becomes due. Payment can be made by credit card, prepayment, or Klarna invoice purchase. The additional step is understandable – after all, the pharmacy is an independent actor – but it seems cumbersome.
Flexible Shipping Options from 5.99 Euros
Several delivery options are available: DHL shipping for 5.99 Euros, GO! Express for 12.99 Euros, or free pickup at one of the two partner pharmacies in Düsseldorf. A valid identification document is required for pickup. We choose DHL shipping and complete the order at 3:30 p.m.
Cannabis Delivered After Two Days
On the 17th – two days after payment – the package arrives. Delivery is smooth, discreet, and reliable. In terms of logistics, there is nothing to complain about. A total of less than 48 hours pass from the prescription request to delivery.
A Critical Look at Data Security
Current reports and our own test impressions show, however, that one should look more closely at providers like Dr. Ansay. For us, data security is clearly part of modern, responsible support.
What Heise Reports About the Data Breach
A report from Heise.de makes it clear how quickly digital patient records can become vulnerable. Due to a misconfiguration, approximately 1.7 million prescriptions from about 330,000 customers were potentially viewable. Not only names and contact details were affected, but also particularly sensitive information such as diagnoses, dosages, and details about treating physicians. The fact that logged-in users could have access to other people's data sets via simple tokens does not meet the security standard that one should expect in this area.
More Than Just an Isolated Incident
Particularly critical: It does not appear to have been an isolated incident. Already in May 2024, another data breach was reported, where documents were even allegedly discoverable via search engines. When security vulnerabilities remain open for days despite warnings and it remains unclear whether data has been leaked, trust suffers massively. Especially when it comes to hemp and personal health, discretion is absolutely non-negotiable for us.
Our Impressions from Identity Verification
Unfortunately, our own experiences in the test also fit this picture. After registration, the specified email address was not verified – although this is normally a simple standard to protect accounts from misuse. In addition, the system even accepted an identity card that had expired two years ago for identity verification. While this seems quick and uncomplicated, it raises questions about how thorough and secure such processes really are – and precisely here, we would like to see significantly more care for the community.
Our Conclusion: Speed at the Expense of Diligence
Dr. Ansay delivers quickly – no question. Anyone who wants to have cannabis in their mailbox within two days will find a provider here who makes this possible. But speed comes at the expense of diligence. Missing email verification, accepted expired IDs, and a questionnaire where the "right" answers are highlighted in color raise questions. The medical examination seems superficial, and the security standards are incomplete. Anyone who values transparency and thorough medical support should look for alternatives.
Criticism: Shipping Address Versus Proof of Identity
Another critical point is the discrepancy between the delivery address and the address on the (already expired) identity document. In Germany, it is legally permissible to choose a different delivery address. However, if an invalid document meets a different address, this should immediately trigger additional verification steps with a diligent provider. Without this comparison, it is hardly possible to ensure that the prescribed therapy actually reaches the person named in the prescription. The combination of missing email verification and lax address matching opens the door to identity theft.
Transparency Notice
A note on transparency: In our overview of cannabis on prescription, we list various providers, including Dr. Ansay. Until 2025, there was a paid partnership between Hanfify and Dr. Ansay. This cooperation no longer exists. It is important to us that our reports remain independent and offer you honest guidance so that you can make your choice with a good feeling.