Is it legal in Pennsylvania for a doctor's office to insist that a patient give their social security number?