This is written for a founder or executive who is known beyond their own company, and for the chief of staff, attorney, or spouse who has been asked, quietly, to find someone. The worry is usually specific. Could this leak. Could it be subpoenaed. Could it turn up in diligence or in a divorce. Most of those questions have real answers. The psychology of being known is in the essay this guide accompanies.

What does therapist confidentiality actually cover in California?

In California, communications between a patient and a licensed psychotherapist are privileged under Evidence Code section 1014. You can refuse to disclose them, and you can prevent your therapist from disclosing them. Licensed marriage and family therapists are covered psychotherapists under section 1010 [1]. The privilege is what applies in a courtroom. Everywhere else, the Confidentiality of Medical Information Act (Civil Code section 56 and following) and HIPAA govern what a therapist can release [2]. The fact that you are a client at all is protected health information. A therapist cannot confirm you are in treatment to a reporter, an investor, or your board.

The exceptions are narrow and none of them is optional for the therapist. If you communicate a serious threat of physical violence against an identifiable person, Civil Code section 43.92 requires the therapist to act to protect that person, and Evidence Code section 1024 removes the privilege where the therapist reasonably believes you are dangerous [1][3]. Reasonable suspicion of child abuse must be reported under Penal Code section 11166, and elder or dependent adult abuse under Welfare and Institutions Code section 15630 [4][5]. Serious risk to your own life triggers a duty to intervene.

A subpoena is a request from a lawyer. Under Evidence Code section 1015 your therapist is required to claim the privilege on your behalf when records are sought, and only a judge's order after a privilege ruling compels release [1]. The exception that matters most for a public person is section 1016, the patient-litigant exception. If you put your own mental or emotional condition at issue in a case, for instance by claiming emotional distress damages, or in some custody proceedings, the privilege is waived for that issue [1]. That is a conversation to have with your lawyer before you file anything.

Florida has parallel protections: the privilege is in Florida Statutes section 90.503, and confidentiality for licensed marriage and family therapists is in section 491.0147 [6].

Can therapy show up in due diligence, a background check, or a lawsuit?

Not through any channel diligence can reach. Background checks pull public records: litigation, liens, corporate filings, credit, criminal history. Medical records are outside that set. Therapy surfaces in four ways, and you control three of them.

You disclose it. Life and disability insurance applications ask about mental health treatment, and your answers become part of the insurer's file. Lying on those forms is the larger risk; answering honestly about cash-pay therapy creates no paper anywhere else.

Insurance billing. Every claim carries a diagnosis code and a date of service, tied to your name, in the payer's database. That record lives outside the clinical relationship and is a separate target for discovery.

A lawsuit you file yourself, if it puts your mental state at issue, as described above.

The therapist's own tools. A group practice where several clinicians can open the same record, a billing company, an AI note-taker, a session recording. Each is a place your words exist outside the therapist's memory. It is the one you can screen for.

Should I pay with insurance or cash?

Cash pay is the private option because insurance cannot pay without a diagnosis, and a diagnosis on file with your name is the most durable record therapy produces.

What exists Billed through insurance Cash pay
Diagnosis with your name Yes, in the payer's database Only in the therapist's own record, if at all
Session dates Logged by the payer and the plan administrator Known to the therapist only
Who can see it Payer, claims processors, plan administrator, sometimes a case reviewer The therapist
Employer visibility Employer does not see claims, but the plan administrator it hires does None
Reachable by subpoena Yes, the insurer's file is a separate target Only the therapist's record, and the therapist claims privilege first
Superbill for reimbursement Not needed Optional; nothing is filed unless you file it

A superbill is a receipt with a diagnosis code that you can submit to a PPO for out-of-network reimbursement. If you never ask for one, nothing leaves the practice. The fee and insurance details on this site describe how that works here.

What should I ask a therapist before the first session?

Ask these on the consultation call, before you have said anything you would want protected.

Who else can see my record. Solo practitioner or group practice. Whether there is an electronic health record vendor, a billing service, a supervisor, or a covering clinician with access.

Where do your notes live, and what goes in them. Paper, an offline device, or a cloud system. HIPAA gives psychotherapy notes, the therapist's own process notes kept separate from the medical record, a higher level of protection; releasing them needs a specific authorization from you [7]. Ask whether they keep the two apart.

Do you record sessions, or use an AI transcription or note-taking tool. Many therapists do not mention it. The answer you want is no.

What video platform do you use, and do you have a business associate agreement with the vendor. The federal enforcement discretion that let therapists use consumer video during the pandemic ended in 2023, so a HIPAA-compliant platform is the baseline [8]. How telehealth removes the lobby is covered elsewhere on this site.

What would you do if you received a subpoena for my records. The right answer is that nothing is released without your written authorization or a judge's order, that they assert privilege, and that they tell you before responding.

Do you know who I am, and how do you feel about that. A therapist who follows your company, holds your stock, or is a little pleased to have you cannot see you clearly. The same goes for dual relationships: a spouse who works at a firm you deal with, a seat on a board you sit on, a mutual investor. The AAMFT Code of Ethics, which governs LMFTs, treats confidentiality and multiple relationships as standing obligations [9]. A good therapist names any overlap before you have to.

What would you say if a journalist called. Nothing. Not a confirmation, not a denial, not "I cannot comment on clients," which is itself a confirmation.

A first session for a founder is described in more detail on the blog. If you are unsure whether you need a therapist or a coach for this, the difference is set out here. Coaches have no statutory privilege.

How do I check a therapist's licence?

In California, marriage and family therapists, clinical social workers, and professional clinical counsellors are licensed by the Board of Behavioral Sciences, and psychologists by the Board of Psychology. Both are searchable at the Department of Consumer Affairs licence lookup, search.dca.ca.gov [10]. Check that the status reads clear, that the licence is current, and whether any disciplinary action is listed. In Florida, use the Department of Health's MQA Search Services portal, mqa-internet.doh.state.fl.us, which shows licence status and any discipline [11]. A therapist who works with public people should print licence numbers on their website so you can check without asking. If they are missing, ask, and treat reluctance as an answer. What else to look for in a California therapist is its own guide.

What can a therapist not promise you?

They cannot promise absolute secrecy. The exceptions above apply to every licensed clinician in California and Florida alike and cannot be waived by agreement. They cannot promise to defy a judge. They cannot treat you under a false name; the record has to be accurate, and California requires LMFTs to retain records for seven years after treatment ends [12]. What a careful therapist can do is keep the record minimal, keep their own notes offline, and keep it theirs.

How does this practice handle it?

Stated once, as structure. This is a solo practice with no staff and no billing company. Appointments, billing, and the clinical record live in SimplePractice, a HIPAA-compliant electronic health record, and no one but the therapist has access to it. Session notes are handwritten on a tablet that does not connect to the cloud, and they never enter a digital tool. There is no AI note-taker, no transcription, and no recording. Sessions run on a HIPAA-compliant video platform in your browser. No insurance is billed, and a superbill exists only if you ask for one. The contact form collects no clinical information, so an assistant or attorney can make first contact without naming you, the same intake as on the family office page. What exists digitally is the consultation booking and the SimplePractice record. Nothing is shared with anyone without your written consent. Licence numbers are on the About page: Diana Chu is a Licensed Marriage and Family Therapist in California (LMFT #105546) and Florida (TPMF785) and a Registered Drama Therapist (RDT #659). The legal exceptions above apply here too.

Frequently asked questions

Is therapy confidential if I am a CEO or public figure?

Yes. In California, communications with a licensed therapist are privileged under Evidence Code section 1014, and in Florida under Florida Statutes section 90.503. The fact that you are a client is protected health information. The exceptions are the same for everyone: a serious threat to an identifiable person, child or elder abuse, risk to your own life, and a judge's order.

Can my board or investors find out I am in therapy?

Not from the therapist, and not from any record they can request. Boards and investors have no access to medical records. The routes are your own disclosure, an insurance claims trail, or litigation in which you put your mental state at issue. Paying cash and using a solo practitioner closes the first two.

Is telehealth private enough for a public figure?

Yes, provided the platform is HIPAA-compliant and the therapist has a business associate agreement with the vendor. There is no waiting room and no recording on a properly configured platform. You must be physically in a state where the therapist is licensed at the time of the session.

Can my assistant or attorney set up therapy on my behalf?

Yes. First contact can come from a gatekeeper without disclosing your name or any clinical detail. Consent and intake happen directly with you before any session. Payment through a family office or company is possible, though paying through the company can create a record there, so many public clients pay personally.

Does a therapist have to report me if I talk about something illegal?

Generally no. Past conduct, including crimes, is privileged. The mandatory reports concern present or future harm: a serious threat to an identifiable person, reasonable suspicion of child, elder, or dependent adult abuse, and imminent risk to your own life.

References

  1. California Evidence Code, sections 1010, 1014, 1015, 1016, and 1024 (psychotherapist-patient privilege and exceptions). leginfo.legislature.ca.gov
  2. California Civil Code, section 56 et seq. (Confidentiality of Medical Information Act). leginfo.legislature.ca.gov
  3. California Civil Code, section 43.92 (duty to protect where a patient communicates a serious threat of physical violence).
  4. California Penal Code, section 11166 (Child Abuse and Neglect Reporting Act, mandated reporting).
  5. California Welfare and Institutions Code, section 15630 (mandated reporting of elder and dependent adult abuse).
  6. Florida Statutes, section 90.503 (psychotherapist-patient privilege) and section 491.0147 (confidentiality for licensed clinical social workers, marriage and family therapists, and mental health counsellors).
  7. U.S. Code of Federal Regulations, 45 CFR 164.501 (definition of psychotherapy notes) and 45 CFR 164.508(a)(2) (authorization required for psychotherapy notes).
  8. U.S. Department of Health and Human Services, Office for Civil Rights. Notice of expiration of certain notifications of enforcement discretion issued in response to COVID-19 (telehealth), effective 11 May 2023 with a transition period to 9 August 2023. hhs.gov/hipaa
  9. American Association for Marriage and Family Therapy (2015). AAMFT Code of Ethics, Standard I (Responsibility to Clients, multiple relationships) and Standard II (Confidentiality). aamft.org
  10. California Department of Consumer Affairs. License Search. search.dca.ca.gov (lists the Board of Behavioral Sciences and the Board of Psychology among its searchable boards)
  11. Florida Department of Health, Division of Medical Quality Assurance. MQA Search Services, License Verification. mqa-internet.doh.state.fl.us/MQASearchServices
  12. California Business and Professions Code, section 4980.49 (an LMFT retains health service records for at least seven years from termination; for minors, seven years from age 18).
Work Together

First Contact Does Not Need Your Name

A free 20-minute consultation can be booked by you or by whoever you trust to make the call, and nothing clinical is collected before we speak. I work with founders and executives in California and Florida. Everything stays in the therapy room.

Book a Free Consultation