You've been thinking about starting therapy. Maybe you've had the tab open for weeks. But before you book, a question stops you: if you apply for life insurance next year, or need a security clearance, will this show up? Will someone, somewhere, pull a file and see a diagnosis code you didn't know existed?
That hesitation is common. It's also not unfounded -- but the picture is more layered than the fear suggests.
Who you see matters. How you pay matters more. A therapist billing your insurance creates a claims trail. A psychiatrist prescribing medication adds prescription records. Paying out of pocket leaves no trace in the insurance system, but costs more. These are real tradeoffs, and the right choice depends on your specific situation -- whether you're a federal employee applying for clearance, a private-sector worker with group health coverage, or someone comparing BetterHelp to an in-network provider.
This guide covers what goes into your record when you seek therapy, rehab, STD testing, reproductive health care, and telehealth services. Where the law protects you, we'll say so. Where gaps exist between legal protection and daily reality, we'll name those too.
What Actually Goes Into Your Medical Record
When you see any healthcare provider, certain data points get recorded:
- Diagnosis codes (ICD codes): A standardized code representing your diagnosis. For therapy, this might be F33.1 (Major Depressive Disorder, recurrent, moderate) or F41.1 (Generalized Anxiety Disorder).
- Session dates and times: When you were seen and for how long.
- Medications prescribed: If your therapist or psychiatrist prescribed medication, it enters the record.
- Treatment plans and goals: Broad treatment objectives.
- Referrals and coordination notes: Communication between providers about your care.
What goes into your medical record is different from what your therapist writes in their own notes. That distinction matters.
The Key Distinction: Psychotherapy Notes
HIPAA creates a special category for psychotherapy notes and protects them more strongly than standard medical records.
Under HIPAA, psychotherapy notes are a therapist's personal documentation of session content -- what was discussed, the patient's reactions, the therapist's analysis and impressions. These are sometimes called "process notes."
These notes are stored separately from the rest of your medical record. They require your specific written authorization before anyone can see them -- including other doctors treating you.
The usual HIPAA exceptions for "treatment, payment, and operations" don't apply here. Your insurer cannot demand them. A hospital treating you for a broken arm cannot pull them. Your employer cannot reach them through workers' compensation.
The narrow exceptions to psychotherapy note protection:
- The therapist's own supervision or training
- Defending against a malpractice claim from the patient
- When a patient poses a serious, imminent threat to themselves or others
- Legal mandates like child abuse reporting
"Psychotherapy notes -- your therapist's personal session notes -- have stronger protection under HIPAA than almost any other medical record. Even your health insurer cannot demand them without your written authorization."
What CAN Go Into the Record (Even for Therapy)
Psychotherapy notes are protected. But other therapy-related data enters your record and potentially your insurance file.
Diagnosis codes. If you bill insurance for therapy, your therapist must submit a diagnosis code. That code goes to your insurer's records and may appear in the Medical Information Bureau (MIB) -- a database used by life, disability, and long-term care insurers when evaluating applications.
Medication prescriptions. Antidepressants, anti-anxiety drugs, and other psychiatric medications prescribed by your psychiatrist or NP are visible through pharmacy benefit managers and prescription databases. This is true whether you use insurance or not for the therapy itself.
Progress notes (distinct from psychotherapy notes). Progress notes summarize whether treatment goals are being met, attendance patterns, and general trajectory. They're part of the standard medical record and accessible to insurers and other treating providers.
Hospitalization records. Inpatient psychiatric admission is documented like any other hospitalization.
Therapy Record Visibility: What Others Can See
Visibility score (0–100): higher = more visible to insurers and other providers. Green = protected, rose = visible.
Diagnosis codes: visibility 90/100 (visible); Session dates: visibility 80/100 (visible); Medications: visibility 85/100 (visible); Progress notes: visibility 50/100 (partial); Psychotherapy notes: visibility 15/100 (protected); 42 CFR Part 2 records: visibility 5/100 (protected)
Does Rehab Go on Your Medical Record?
Substance abuse treatment records carry their own federal shield, and it's stronger than HIPAA.
42 CFR Part 2 applies to records from federally funded substance abuse treatment programs. Nearly all licensed drug and alcohol treatment facilities receive some form of federal assistance, so Part 2 covers most of them.
Under 42 CFR Part 2:
- Records cannot be shared without your written consent, even with other healthcare providers treating you for something else
- Law enforcement cannot access records without a specific court order under narrow circumstances
- Records cannot be used as criminal evidence without your consent
- Even the fact that you sought treatment is protected -- a Part 2 program cannot confirm or deny you are a patient
Congress built these rules because disclosure fear was killing people. When someone won't enter treatment because they're afraid it'll cost them a job or a custody case, the cost of weak privacy law is measured in lives.
"Federal law (42 CFR Part 2) gives substance abuse treatment records stronger protection than almost any other health record. Even other doctors treating you for a different condition cannot access these records without your consent."
Practical caveats:
- Not every provider falls under Part 2. A general practitioner prescribing buprenorphine in private practice may not be covered, though HIPAA still applies.
- If you voluntarily tell another provider about your substance use history, they can document it. That documentation lives under standard HIPAA rules, not Part 2.
- Workers' compensation claims related to substance abuse may open limited access to relevant records.
Do STDs Go on Your Medical Record?
Your diagnosis enters your clinical record. If you test positive for an STI at your doctor's office, that result is documented. Any provider who later requests your records with authorization may see it.
Mandatory reporting exists for certain STIs -- but reports go to public health authorities, not employers or insurers. Reportable conditions in most states include:
State health departments receive name-identified reports for contact tracing, but this data is protected public health information. It does not reach your employer or insurer through that channel.
Insurance billing creates a separate trail. If treatment was billed to insurance, the diagnosis code appears in your claims history. That's distinct from the public health report.
Anonymous and confidential testing options exist. Health departments, Planned Parenthood clinics, and sexual health clinics offer confidential testing (your name is recorded but not shared) or anonymous testing (no name recorded at all). These let you know your status without creating a standard medical record entry.
Does BetterHelp (or Talkspace) Go on Your Medical Record?
Telehealth therapy platforms maintain their own records, separate from broader medical record systems. But "separate from your medical record" and "private" are not the same thing.
BetterHelp operates as a non-insurance platform:
- It does not submit claims to your insurer (they bill you directly)
- No diagnosis code reaches an insurance company
- No record goes to the Medical Information Bureau
BetterHelp does keep internal records: your account, session dates, participation data, and any therapist notes (governed by their privacy policy and state law).
That privacy policy deserves scrutiny. In 2023, the FTC took action against BetterHelp for sharing user data -- including the fact that users sought mental health services -- with Facebook and Snapchat for advertising. They settled and changed practices. But the episode shows that "no insurance trail" does not mean "no data trail."
Talkspace offers both self-pay and insurance billing. If you use insurance through Talkspace, a diagnosis code goes to your insurer -- identical to seeing an in-network therapist in person.
"Telehealth therapy platforms like BetterHelp don't submit claims to your insurer if you pay out of pocket -- which means no diagnosis code in your insurance records. But they still maintain their own internal records, and their privacy practices matter."
The telehealth summary:
- Self-pay through any platform = no insurance record, but the platform holds its own data
- Insurance billing through any platform = diagnosis code goes to your insurer
- Standard HIPAA protections apply to all licensed therapists, regardless of platform
Reproductive Health Records: What the Post-Dobbs World Means
Since the Supreme Court's Dobbs decision in 2022 overturned Roe v. Wade, questions about reproductive health records have become more urgent.
What goes in the record: Abortion care -- medication or procedural -- is documented like any other medical procedure. The clinical record includes the procedure, medications, follow-up care, and related diagnoses.
The legal landscape: In states where abortion is restricted or criminalized, law enforcement could potentially compel access to records. HIPAA does allow disclosure pursuant to a court order or grand jury subpoena, though it limits disclosure "to the extent necessary" and courts can impose restrictions.
Several states have passed shield laws to protect providers who deliver abortion care to out-of-state patients from being compelled to disclose records. As of early 2026, these exist in California, New York, Washington, Massachusetts, Colorado, Minnesota, and others.
Practical steps for privacy:
- Paying out of pocket avoids filing an insurance claim
- Some reproductive health clinics offer confidential or anonymous services
- Seek care in a state with strong shield laws if disclosure is a concern
- Evaluate the data practices of any period tracking or health apps you use
See our state-specific guides for reproductive health record protections in your state.
Self-Pay vs. Insurance Billing: The Privacy Tradeoff
Across every sensitive health category covered here, how you pay is the single biggest privacy lever you control.
When you use insurance:
- A diagnosis code is required for billing
- That code enters your insurer's records
- It may appear in the MIB database, used by life, disability, and long-term care insurers
When you pay out of pocket:
- No diagnosis code is submitted
- Your records still exist at the provider, but they stay out of the insurance data ecosystem
The tradeoff is blunt. Insurance saves you money but creates a billing trail. Self-pay costs more but leaves no footprint outside your provider's office.
HIPAA gives you the right to restrict -- you can request that your provider not share information with your health plan if you pay out of pocket in full. Your provider must honor this request when the disclosure would be to a health plan for payment purposes.
Summary: What Goes on Your Record vs. What Doesn't
| Situation | What Enters Your Record | What's Protected |
|---|
| Therapy (billed to insurance) | Diagnosis code, session dates, progress notes | Psychotherapy notes (separate, strongly protected) |
| Therapy (self-pay) | Session dates, notes if therapist keeps them | No insurance record of diagnosis |
| BetterHelp / self-pay telehealth | Platform's own records | No insurance claim |
| Substance abuse rehab (Part 2 covered) | Treatment records protected under 42 CFR Part 2 | Even the fact of treatment |
| STD diagnosis (doctor's office) | Diagnosis in your clinical record; reportable diseases reported to health dept | Not shared with employer or public |
| STD testing (anonymous) | No record tied to your name | Complete anonymity |
| Abortion care (self-pay) | Clinical record at provider | No insurance record |
| Abortion care (insurance) | Diagnosis code submitted to insurer | State shield laws may apply in some states |
When This Actually Matters
Most people seeking therapy will never face a records problem. But certain situations sharpen the stakes:
- Applying for life or disability insurance. Insurers ask you to authorize release of medical records and MIB data. A depression diagnosis code in your claims history can affect underwriting. Psychotherapy notes remain protected, but the diagnosis code is visible.
- Federal employment and security clearances. SF-86 forms ask about mental health treatment, though the question has narrowed over the years. Counseling for grief, family issues, or combat-related conditions generally doesn't require disclosure. Involuntary commitment or court-ordered treatment does.
- Custody disputes. Opposing counsel may subpoena therapy records. Psychotherapy notes still require separate authorization, but progress notes and diagnosis codes can be compelled by court order.
- Employer wellness programs. Your employer cannot access your therapy records through your health plan. But if you use an Employee Assistance Program, understand its confidentiality terms before disclosing.
- Changing insurance plans. Your diagnosis history travels with your claims data. A new insurer can see past diagnoses when processing claims.
The law draws clear lines around mental health and substance abuse privacy. In practice, those lines hold up well in most situations -- but they weaken at the seams where healthcare meets insurance underwriting, security vetting, and family court. The gap between "your employer can't see your records" and "a life insurer can ask you to sign a release" is where most of the real friction lives.
If you have questions about your rights in your state, our state-specific patient guides have detailed breakdowns. And if you need help accessing or understanding records you or someone you know already has, MedicalRecords.com can help you navigate the process.