I only need to get name, an address, and a date of birth when I am taking down patient info on a call, and that's sufficient for us to locate medical records, and for our billing agency to figure out how to extract funds from them if necessary. We don't even bother with SS or DL info or anything.