If a PGO a MedMij label has, you can be sure that you can safely retrieve your data there.

A MedMij label is not granted automatically. After all, a PGO must comply with the dates that in the MedMij Framework of Agreements are described.
This includes, among other things, strict rules for privacy and security of information.

You can find more information about ensuring safety here:
How does MedMij guarantee safety?

It Ministry of Health, Welfare and Sport and healthcare providers have of the Dutch Data Protection Authority instructed to maintain a high level of reliability when exchanging health data. This also applies to a PHE.

This high reliability level implies logging in via DigiD is now only possible via the app, where you scan your ID once. Logging in with an SMS code is no longer possible.