A 2 minute assessment to get a personalized mental health or alcohol recovery plan.
Yes, care creates a record. What matters far more is who can legally see it, and that answer is narrower than most people assume.
What You'll Discover:
• What actually gets written down when you get help with drinking.
• How HIPAA works and where it stops.
• The extra federal protection for substance use records, and who it covers.
• Why paying cash changes what your insurer sees.
• The questions worth asking any provider before you start.
Privacy is one of the most common reasons people put off getting help with drinking, and it is a reasonable thing to think about carefully.
The short version is that yes, medical care creates a medical record. That part is unavoidable and it is not unique to alcohol.
The more useful question is who can actually see it. That answer turns out to be far more restricted than most people picture, though it is not the blanket guarantee some sites imply.
What "Medical Record" Actually Means
There is no single national file with your name on it.
Records live with whoever provided the care. Your primary care doctor keeps one. A telehealth provider keeps its own. A pharmacy holds dispensing records. An insurer holds claims data.
These systems do not automatically talk to each other. Some connect through health information exchanges, but that usually requires participation and often requires your consent.
So when people ask whether treatment "goes on your record," the accurate answer is that it goes on a record. Held by a specific provider, governed by specific rules.
What Actually Gets Written Down
The contents are less dramatic than people imagine.
A typical entry includes what you reported about your drinking, relevant medical history, current medications, the clinical assessment, and what was prescribed.
There is usually a diagnosis code, because that is how medical documentation works. For alcohol care that code reflects a clinical assessment, not a moral judgment, and it sits alongside every other code in medicine.
What is not in there is narrative about your character. Clinical notes are functional documents written for continuity of care.
If you ever want to see exactly what a provider wrote, you can. HIPAA gives you the right to request and receive copies of your own records, and a great many people find the reality far duller than the anticipation.
HIPAA Is the Baseline, Not the Whole Story
HIPAA is the rule most people have heard of. It sets national standards for protecting health information held by providers, health plans, and clearinghouses.
Under HHS guidance on your rights under HIPAA, you can see and get copies of your records, request corrections, and ask for an accounting of certain disclosures.
It also limits what providers can share without your authorization. Treatment, payment, and healthcare operations are the main permitted uses, and disclosures are supposed to stay at the minimum necessary.
What HIPAA does not do is make records invisible. It governs who can access them and under what circumstances.
It also does not cover everyone. Employers acting as employers are not covered entities, and neither are most consumer wellness apps.
The Extra Layer for Substance Use Records
Substance use records get a second layer of federal protection that most health information does not receive.
It is called 42 CFR Part 2. HHS explains it in its guide to confidentiality of substance use disorder patient records, and the regulation itself sits at 42 CFR Part 2 on eCFR.
Part 2 is stricter than HIPAA in ways that matter. A 2024 Final Rule updated it, adding restrictions on the use of these records in civil, criminal, and administrative proceedings absent your consent or a court order.
It also gave patients new rights to request restrictions on certain disclosures and to receive an accounting of disclosures that were made.
Now the nuance that matters most and is almost never explained clearly. Part 2 applies to federally assisted programs that hold themselves out as providing substance use diagnosis, treatment, or referral.
That is not every provider you might talk to about drinking. A general medical practice that treats you for many things may not be a Part 2 program, even when drinking comes up in the visit.
So ask directly whether a given provider operates under Part 2. Do not assume it in either direction, and be wary of any site that implies the protection is universal.
Who Can Typically See What
What Employers Can and Cannot See
This is the fear that stops most people, so precision matters here.
Employers generally cannot request your medical records from a provider without your written authorization. They are not the ones holding those records in the first place.
The Americans with Disabilities Act also restricts employer medical inquiries and requires that any medical information an employer does hold be kept confidential and stored separately from your general personnel file.
Standard background checks do not include medical records. They cover identity, criminal history, and employment verification.
Where exposure does exist, it is usually through something you initiated. A leave request. An accommodation. A wellness program. A drug test where you disclosed a prescription list.
Certain roles carry additional obligations. Commercial drivers, pilots, some licensed clinicians, and people holding security clearances have specific reporting requirements.
If that describes your work, get advice specific to your role rather than general reassurance from an article. The details vary and they matter.
Insurance Billing Versus Cash-Pay
The path your payment takes determines a great deal.
When a visit is billed to insurance, a claim goes to your health plan. That claim carries diagnosis and procedure codes, and it may show up on an explanation of benefits.
If you are on someone else's policy, a parent's or a spouse's, that document typically goes to the policyholder. A surprising share of real privacy problems start right there.
Cash-pay works differently. No claim gets filed, so no insurer receives the encounter at all.
There is also a specific HIPAA right worth knowing about here. When you pay out of pocket in full for a service, you can request that the provider not disclose that information to your health plan.
Providers are generally required to honor that particular request. It is one of the few places in HIPAA where the patient gets to say no and the answer sticks.
That right attaches to the specific service you paid for. Ask about it explicitly rather than assuming it happens automatically.
Many telehealth alcohol services run cash-pay by default, which we cover in our guide to online alcohol treatment without insurance.
What Telehealth Changes and What It Does Not
Telehealth does not change your legal protections. The same rules apply to a video visit as to an office visit.
What it changes is the physical footprint. No waiting room in a town where people recognize you. No car parked outside a clinic. No time-off request that needs a reason attached.
Medication typically ships in discreet packaging with nothing on the outside indicating what is inside.
What telehealth does not change is that a licensed clinician is documenting real care. There is a chart, because there has to be one for the care to be legitimate.
One thing to check on your own end is the household. A shipment arriving at a shared address is still a package someone might open, and a shared email inbox is a common weak point.
Most providers can ship to an alternate address if you ask. Setting up a separate email for medical correspondence takes about two minutes and closes the most likely gap.
Our overview of telehealth alcohol treatment walks through how the model works from assessment to delivery.
One Detail About Naltrexone Worth Knowing
Naltrexone is not a controlled substance.
That has a practical consequence. Controlled substances get logged in state prescription drug monitoring databases that pharmacists and prescribers can query. Naltrexone does not fall into that category.
It is also not sedating, not habit-forming, and carries no abuse potential. That profile is a large part of why it can be prescribed through telehealth at all.
None of that makes the prescription invisible. Your pharmacy holds a record, and your insurer sees it if you run it through coverage. It simply means no separate monitoring system is tracking it.
Why Privacy Fears Keep People Out of Care
The concern is not irrational, and the research is fairly blunt about it.
A scoping review of barriers to treatment for problematic alcohol use found the need for anonymity, privacy, and confidentiality was driven by fears of stigma and shame, alongside worries about losing employment, children, or a military career.
Those fears were sharpest in small communities and in professions where a record might carry consequences.
Worth naming plainly. The privacy risk of getting care is usually much smaller than the health risk of continuing to drink at a level that concerns you.
For people whose real worry is the people around them rather than institutions, our guide to drinking less without anyone knowing is the more practical read.
What to Ask Any Provider Directly
Do not settle for a reassuring line on a homepage. Ask specific questions and expect specific answers.
Ask whether they operate under 42 CFR Part 2. Ask whether they bill insurance or run cash-pay, and what shows up on a statement if they do.
Ask whether records are shared with your primary care provider or any health information exchange, and whether that requires your consent first.
Ask how medication is packaged and labeled, and what the sender name reads as on the box.
Ask whether your data is ever used for advertising or shared with third parties, and request the actual privacy policy rather than a summary of it.
Any provider that answers these clearly is telling you something real about how it operates. We go through the whole checklist in our guide to private alcohol treatment.
What No Provider Can Honestly Promise
Nobody can guarantee absolute confidentiality, and any service that does is saying something untrue.
Court orders exist. Data breaches happen to organizations of every size. Insurance systems are complicated. Disclosures you authorize yourself, for a mortgage or a life insurance application, are still disclosures.
The realistic promise is a narrow and well-governed set of people who can access your information, strong federal rules limiting everyone else, and a provider willing to explain exactly how it all works.
That is what good practice looks like. Certainty is not on offer from anyone, and the ones offering it are the ones to be careful with.
Bringing It Together
Getting help for drinking creates a medical record, the same way any medical care does.
That record sits with your provider, protected by HIPAA and often by the stricter substance use rules in 42 CFR Part 2. Employers cannot pull it without your authorization. Standard background checks do not reach it.
Paying cash keeps a claim from ever reaching your insurer. Telehealth removes the visible footprint without weakening the legal protections behind it.
Ask your questions before you start and get real answers to them. Then weigh that against what another year of the current pattern is likely to cost.
Most people find the privacy math comes out in favor of getting help.
Frequently Asked Questions
Will my employer find out if I get alcohol treatment?
Generally no. Employers cannot obtain medical records from a provider without your written authorization, and standard background checks do not include medical information.
Does 42 CFR Part 2 apply to every alcohol treatment provider?
No. It applies to federally assisted programs that hold themselves out as providing substance use diagnosis, treatment, or referral. Ask your provider directly whether they operate under it.
Does naltrexone show up in a prescription monitoring database?
Naltrexone is not a controlled substance, so it is not tracked in state prescription drug monitoring programs. Your pharmacy and insurer still hold records.
Can I keep treatment off my insurance record?
Paying out of pocket means no claim is filed. You can also request that a provider not disclose a service to your health plan when you have paid in full for it.
Will my primary care doctor be told?
Not automatically. Records are generally shared only with your consent, though it is worth asking each provider how they handle coordination of care.
Is telehealth more private than in-person care?
The legal protections are identical. Telehealth removes the visible parts, like waiting rooms and time off work, which is usually what people are actually worried about.
See what discreet, physician-guided care would look like for you. Take the Alcohol Use Assessment to find out whether naltrexone is a fit and how Choose Your Horizon handles your information.




