Can a physician or medical staff member confirm or deny that you are a patient?

I believe that informatio of any kind can not be released without the proper forms being signed by you. So the office that did not confirm or deny was right.