Unnecessary Security

[wdrs]

Every time I connect my Band to my Desktop PC using the supplied cable, and open "Microsoft Band Sync" the Band syncs as expected. However if I want to see the results and click on "Dashboard" I am asked to login to my Microsoft Account with my Password "because I am accessing sensitive info and need to verify my password". I have set up two step login authentication for my Microsoft Account, but all that is requested is my Password. However surely there should be a button that I can instruct my Dashboard not to ask for the Password when I login from my PC.
I am not paranoid about my health statistics, and in the unlikely event that anyone accesses my PC and logs in to Dashboard, I am not worried if they should see how well I slept last night or how many steps I have taken or whatever is on display, but I deprecate the necessity to perform half my login requirement each time I go to Dashboard.
I would prefer it if every time I login to my Microsoft Account from my PC I can get in without any further fuss, whilst if I try to login from another PC, Laptop, Tablet or Phone, which has not previously been used to login to my Dashboard, then the full two step verification should be initiated. Can that be achieved?

 

[Nate Silver]

I don't have an answer, but its the same way for HealthVault. Gotta log in every time. Guess an 'abundance of caution' isn't a totally bad thing when dealing with your health info. Of course, they probably sell your (anonymized) data all over the place.

 

[poit57]

I've been curious about this login issue as well. As far as I know, no other website that uses a Microsoft account for verification requires reentering the password every time because they can recognize that I used my account to log into my Windows 8.x computer. I don't get why this would be any different.

 

[hotphil]

Of course, they probably sell your (anonymized) data all over the place.

They'd be breaking the Service Agreement if they did.

 

[Talderon]

I figured it was security required by the HIPAA Act:

Protected Health Information. The Privacy Rule protects all "individually identifiable health information" held or transmitted by a covered entity or its business associate, in any form or media, whether electronic, paper, or oral. The Privacy Rule calls this information "protected health information (PHI)."

Source: Summary of the HIPAA Privacy Rule