Health details in a QR code are not private
A QR code is not encryption. Anyone holding the card — or a photograph of it — can read every field, and medication is among the most revealing things anybody carries. The safe default is a pharmacy name and a reference number, which lets a pharmacist find the record while telling a stranger nothing about a diagnosis.