QR codes are designed to be like postcards on lampposts. They are not designed to contain private information. They are meant to be openly scannable by anyone at all in full public view. As such, they are the least appropriate medium to be placing any kind of personal medical information
