This collection agency obtained the name and phone number of my emergency contact person from my MEDICAL RECORDS and repeatedly contacted that person!!! Is this legal??? They left messages and contacted this person even after she called them back and asked them not to contact her again.