Guides · Agreements and policies
Is a client’s name beside a therapy appointment health information?
Often, yes. A name next to the fact that somebody sees a therapist says something about their health. In the US, whether HIPAA applies depends on whether you’re a covered entity, which usually means billing health insurance electronically. Many private-pay practitioners aren’t, but state laws can still apply.
A booking that says “Jordan Lee, Tuesday 4pm, 50-minute session” is a calendar entry in a coaching practice. In a therapy practice it’s a fact about Jordan’s health. The same line carries different weight depending on the work.
When HIPAA applies
HIPAA’s Privacy Rule covers health plans, health care clearinghouses and health care providers who send health information electronically in standard transactions, such as claims to an insurer. A provider who’s covered has to protect identifiable health information, including names tied to care, and needs a business associate agreement with vendors who handle it.
When it may not
A practitioner who takes private payment only and never bills insurance electronically may not be a covered entity at all. That doesn’t make the information less sensitive, and some states have their own health privacy laws that reach further than HIPAA.
Where WorkWith stands
We don’t sign a business associate agreement. If you work inside a clinic or a health plan that needs one, keep that work where it is now. If you take private clients alone and aren’t a covered entity, our security page says what we protect and how, and you can ask us before you sign up.
What to do either way
- Keep notes about the work out of anything a client receives by email.
- Write down where you keep client information, so you can answer when somebody asks.
This explains what agreements commonly cover. Your profession, your country and the size of the work can each change what yours needs, and a lawyer who knows them is the person to ask.
Sources: HHS, Covered entities and business associates; HHS, Summary of the HIPAA Privacy Rule. Checked 2026-10-11.