How Much Privacy Do You Have in Online Therapy?

If you’re considering online therapy, privacy is probably one of your first concerns.

Who can hear what you say? Who can see your information? What gets stored after the appointment? And if a family member helps you set up technology, does that mean they can find out what you talked about?

These are reasonable questions. Therapy often involves deeply personal conversations about grief, stress, family, health, loneliness, fear, or life changes. You shouldn’t be in the dark about where that information goes.

Online therapy can be private and secure when it is delivered through a HIPAA-compliant provider. That doesn’t mean every online platform handles information the same way, and it doesn’t mean technology is risk-free. It does mean that legitimate healthcare providers are expected to follow privacy rules, use safeguards, and protect your personal health information.

Here’s what privacy means in online therapy, what your therapist can and cannot share, and how Sailor Health protects patient information.

What privacy means in online therapy

Privacy in online therapy includes a few different things.

First, there’s therapist confidentiality. This means what you discuss with your therapist is generally private. Your therapist shouldn’t casually share your session details with family members, caregivers, employers, marketers, or other people outside your care.

Second, there’s protected health information. This includes information that connects you to your healthcare, symptoms, diagnosis, treatment, appointments, billing, or provider. In healthcare settings, this information is protected by HIPAA.

Third, there’s website and platform data. When you use an online therapy service, the platform may collect certain information needed to create an account, schedule appointments, verify coverage, process billing, run the website, or keep the service secure.

Online therapy is held to many of the same privacy expectations as in-person therapy. The main difference is that online care adds a technology layer. Instead of walking into an office, you may use a website, patient portal, video platform, smartphone, or landline phone. That can raise additional questions about passwords, devices, cookies, video tools, and data storage.

At Sailor Health, health and medical information collected during care is governed by our HIPAA Notice of Privacy Practices. Other personal information, such as certain website or platform information, is covered by Sailor Health’s broader privacy policy.

The important point is this: your privacy is strongly protected, but no honest healthcare provider should promise that any digital system has zero risk. The goal is to use appropriate safeguards to greatly reduce that risk and protect your information from unauthorized access.

What your therapist can and can’t share

In plain English, your therapist cannot simply tell other people what you talked about in therapy.

That includes family members, adult children, caregivers, employers, neighbors, or anyone else who may be curious. Even if an adult child helps you schedule an appointment, log into a portal, or manage technology, that does not automatically give them the right to know what you discuss with your therapist.

There are some limits to confidentiality. A therapist may be required or allowed to share certain information in situations involving safety concerns, suspected abuse or neglect, legal requirements, or when you give permission for information to be shared.

HIPAA also allows healthcare providers to use or disclose protected information for treatment and certain necessary healthcare purposes. For example, information may be shared in appropriate ways to coordinate care, support billing, or meet legal and regulatory requirements. These uses still come with rules, safeguards, and limits.

The simplest way to think about it is this: therapy is private, but it’s not secret in every possible circumstance. Your therapist’s job is to protect your confidentiality while also following healthcare privacy laws and safety requirements.

What happens to therapy notes, records, and personal information?

Online therapy providers may need to keep certain records to provide care, coordinate appointments, handle billing, meet legal requirements, and document treatment.

These records may include information such as:

• Your name and contact information
• Appointment details
• Insurance or billing information
• Treatment-related documentation
• Information about your provider and care
• Account or platform activity
• Device, browser, cookie, or website usage information

Some of this information is considered protected health information. That means it’s information that connects you to your healthcare, treatment, symptoms, diagnosis, or provider.

Therapy records and psychotherapy notes are not always the same thing. Medical or billing records may include information needed for treatment, payment, and healthcare operations. Psychotherapy notes, when used, are notes kept by a mental health professional to document or analyze the contents of a counseling session. These notes generally receive extra privacy protection and are typically kept separate from the broader medical record.

It’s also important to know that privacy doesn’t always mean every piece of information can be deleted immediately upon request. Healthcare providers may need to retain certain records for medical, billing, legal, or regulatory reasons. You can ask about updating or deleting certain personal information, but some records may need to be kept for a required period of time.

How Sailor Health protects your data

Sailor Health uses privacy and security practices designed to protect personal and health information. These safeguards may include encryption, secure systems, firewalls, and safeguards that limit access to only authorized personnel who need the information to do their jobs.

We do not sell your personal information or share your data with third parties, affiliates, or partners for their own advertising or marketing purposes.

Like most online healthcare services, Sailor Health works with certain companies that help keep the platform running smoothly. However, those service providers are contractually required to protect your information and can only use it to provide services on Sailor Health’s behalf.

These protections are designed to make sure your personal information stays in the right hands. While no online system can promise zero risk, strong security measures significantly reduce the chance that someone unauthorized can access your health information.

Ways to make telehealth therapy more private

Healthcare providers are responsible for protecting your information, but there are also simple steps you can take to make your therapy sessions more private.

For video therapy appointments on a computer, tablet, or smartphone, before your first online therapy session, take these five steps:

• Choose a private room where others cannot overhear your conversation.
• Use headphones or earbuds if possible to prevent others nearby from hearing your therapist.
• Use a strong password and enable extra security features on your account when available.
• Connect through a secure internet connection rather than public Wi-Fi.
• Use a personal device whenever possible and log out after your appointment if using a shared device.

For phone or landline therapy sessions, privacy still matters. Try to take the call in a quiet location, avoid using speakerphones when others are nearby, and let your therapist know if someone else is in the room.

Older adults who receive help from an adult child or caregiver may need assistance setting up a device, logging into an appointment, or managing technology. However, the therapy session itself should take place privately unless the patient wants their caregiver or family member involved.

The U.S. Department of Health and Human Services notes that telehealth can involve privacy and security risks, but patients can reduce many of these risks by taking practical steps such as protecting their devices, internet connections, and physical surroundings.

Questions to ask before starting online therapy

If you’re considering online therapy, it’s reasonable to ask direct questions about how your information will be protected.

Consider asking:

• Who can access my personal and health information?
• Is the video platform HIPAA compliant?
• Are therapy sessions recorded?
• How are therapy notes stored and protected?
• How can I update or request deletion of my personal information?
• What happens to my information if I stop using the service?

A trustworthy telehealth provider should be able to explain its privacy practices in clear, everyday language—not just direct you to a lengthy legal document.

Sailor Health is designed for older adults enrolled in Medicare and offers virtual therapy options through video visits, smartphone calls, and landline telephone appointments. Our services are provided by licensed clinicians and supported by HIPAA-compliant practices designed to protect sensitive health information.

If privacy concerns have been preventing you from trying online therapy, asking questions before your first appointment is a smart step. Understanding how your information is protected can help you focus on what matters most: getting the support you need.

How Sailor Health protects your privacy and simplifies care

Knowing your conversations are completely confidential is the first step toward feeling safe enough to open up. Therapy provides a secure space to process the unique challenges that can come with later life, whether you’re navigating a health change, managing daily stress, or coping with grief. But feeling secure in your privacy is only part of the equation. Actually accessing that support should also feel safe, comfortable, and straightforward.

Our clinicians are experienced older adults themselves, meaning they deeply understand how later-life transitions affect mental health and how symptoms can manifest differently as we age. They tailor evidence-based techniques to meet you exactly where you are. We make getting started simple by matching you with a therapist based on your specific needs and preferences, without a long waiting list. In fact, you may be able to begin therapy within 24 hours of signing up.

Because Sailor Health works with Medicare to cover up to 100% of costs, most of our patients have a $0 copay. If privacy concerns or logistical hurdles have been keeping you from seeking support, getting started can be simpler and more secure than you thought. Reach out when you’re ready, and we’ll help you take the first step.

Therapy privacy FAQ

Is online therapy as private as in-person therapy?

Yes, online therapy can be private when it is provided through a HIPAA-compliant provider. The main difference is that online care involves technology, which introduces additional considerations such as internet security, account protection, and data storage.

Can my family members see what I talk about in online therapy?

Not necessarily. Your therapist cannot share details of your sessions with family members, including adult children who help coordinate your care, unless you give permission or a legal exception applies.

Can my therapist share information with my doctor?

Yes. HIPAA allows healthcare providers to share relevant health information with other providers involved in your treatment when necessary for your care. You must give permission for this.

Are online therapy sessions recorded?

Not necessarily. Many telehealth therapy sessions are not routinely recorded, but policies vary by provider. You should ask your provider whether sessions are recorded and how recordings, if any, are stored and protected.

What does HIPAA-compliant video therapy mean?

HIPAA-compliant video therapy uses technology and administrative safeguards designed to protect protected health information. This may include encrypted communications, secure access controls, and agreements requiring technology vendors to safeguard healthcare data.

Are therapy notes protected under HIPAA?

Yes. Therapy records are protected under HIPAA, and psychotherapy notes receive additional protections beyond the standard medical record.

What personal data does an online therapy platform collect?

Depending on the provider, an online therapy platform may collect information such as your name, contact details, appointment information, insurance or billing information, treatment records, device information, cookies, and how you use the platform.

Can I ask Sailor Health to delete my personal information?

Yes, you can ask Sailor Health about options for updating or deleting certain personal information. However, some healthcare and billing records may need to be retained to comply with medical, legal, and regulatory requirements.

Does Medicare affect privacy in online therapy?

Medicare coverage does not reduce your privacy rights. Mental health information provided during Medicare-covered therapy is still protected under HIPAA and other applicable privacy laws.

What should I do if I’m worried someone at home can overhear my session?

Choose a private location when possible, use headphones, avoid speakerphone during telephone sessions, and tell your therapist if privacy is limited. Therapists can often help you adjust the conversation or make alternative arrangements so you can speak more comfortably.