<human>: I am currently 19 years old. Back when I was 8, my family was on vacation and I had a shingles outbreak. It never got to a terrible stage but we contacted our family physician (Dr. Herpina for our ease) and she gave temporary advice and instructions until we could get back in town. (Only a day or two later I believe). Once back in town, it was treated and I have never had problems with it since that time. It was 11 years ago so the details are a bit vague but I do know that Dr. Herpina was the only physician my family ever contacted about my shingles. 

Fast Forward 11 years. This is where it gets interesting... I was home from school last weekend and my mom told me I had a message. I listened to it and was a bit puzzled. It was from a local research firm that was experimenting with shingles. They called and asked if I would be part of a study but I had to be going through an "episode". I respectfully declined, mostly cause I haven't had an "episode" since the original.

But here is my question... how the fuck did this research firm know I once had shingles? Only one physician knew... does this mean she is handing out personal info? If so, how is that legal with the whole "doctor-patient relationship"?

Give me a shortened version of the text
<bot>: I once had shingles and told one doctor, now research firm wants me for shingles study. Did doctor tell? Is that legal?