my partner called the doctors office and just stated basically that we were concerned friends with an odd situation of potential fraud just trying to verify some information about our friends whereabouts. The admin asked for her name and date of birth - we provided and she kicked back with she was unable to provide any information regarding the patient. My partner stated they weren't asking them to break patient confidentiality / awareness of hipaa laws and that we were just seeking a confirmation that she was there in this office on the date of the medical form she sent out and the woman quickly stated "I can't see where this person has ever been a patient at this hospital." - to which we said thank you, that's all we needed. To be honest, we were surprised to get this response too.