Is Therapy Confidential? Will My Family Find Out?

The Legal Framework: PHIPA and Provincial Privacy Law

In Ontario, the Personal Health Information Protection Act (PHIPA) is the legislation that governs the privacy of personal health information, including everything shared in therapy. Under PHIPA, a regulated health professional — which includes all Registered Psychotherapists, Registered Social Workers, and other regulated practitioners — is legally required to keep client information confidential.

What this means in practice: the therapist cannot confirm to a family member whether someone is even their client. They cannot share session content. They cannot send information to an employer. They cannot discuss a client’s attendance or progress with anyone — including a spouse, a parent, or another family member — without the client’s explicit written consent.

British Columbia, Alberta, and other provinces have equivalent health privacy legislation. The CRPO’s professional standards on confidentiality describe this clearly: confidentiality is a regulatory requirement for registered psychotherapists, not simply a professional courtesy.

Sukoon’s sessions are conducted on an encrypted video platform. Session recordings are not made. Notes are stored securely and are not accessible to anyone outside the therapeutic relationship.

The Narrow Exceptions — Named Clearly

There are specific, limited circumstances in which a therapist is legally required or permitted to share information without consent. These are:

• Risk of serious harm to the client or an identifiable other person — if a therapist believes someone is at imminent risk of hurting themselves or another person, they may contact emergency services
• Mandatory reporting of child abuse or neglect — regulated health professionals in Canada are legally required to report reasonable suspicions of child abuse to child protection services
• A court order — if a judge orders that therapy records be disclosed in a legal proceeding, the therapist must comply, though they can contest this

None of these exceptions apply to: a family member wanting to know what was discussed; an employer asking whether an employee is in therapy; a spouse asking about session content; or any other third-party inquiry. Those requests are declined, full stop.

At the start of a first session, a therapist will review these limits clearly as part of the consent process. This is not a warning — it is standard practice, and it means someone enters therapy knowing exactly where the boundaries of confidentiality sit.

What About Using Insurance?

If workplace benefits are used to reimburse therapy sessions, a natural concern arises: can an employer find out?

The short answer is no. When submitting a benefits claim, the receipt contains the therapist’s name, designation, session date, and amount. It does not include session content, diagnosis, or reason for attending. Insurance claims are processed by the insurance provider, not reviewed by employers. The HR team does not see individual claims.

Employee Assistance Programs (EAPs), if used instead of or alongside benefits, are explicitly confidential — employers are not notified of usage. This is a standard feature of EAP programs across Canada.

For Those Whose Privacy Concerns Go Deeper

Some people are navigating situations where even the existence of a therapy relationship feels risky — a controlling partner, a household where privacy is limited, a family whose response to learning about therapy could cause real harm. These situations deserve more than a standard privacy policy.

A few practical notes for these circumstances:

• Online therapy, conducted from a private space (a parked car, a workplace, a quiet public space), can be accessed without any record at a clinic or physical office
• Receipts can be sent to a personal email rather than a shared one — simply specify this to the therapist or platform
• Payment by personal credit or debit card leaves no household record if accounts are separate
• A therapist can be asked directly: ‘What would happen if a family member called and asked about me?’ The answer, for any regulated practitioner, is that the call would be declined

The Deeper Concern

Research on South Asian youth in Canada — including a study from Peel Region published in Sage — identifies fear of confidentiality breach as one of the primary documented barriers to seeking mental health care. This fear is not irrational; it reflects real experience with environments where information flows through family and community networks in ways that feel uncontrollable.

Naming this fear explicitly, and addressing it with the specific legal and practical information above, is part of what culturally competent care looks like. The point is not to dismiss the concern, but to give someone enough accurate information to make a genuinely informed decision.

Ready to begin?

Questions about privacy and confidentiality can be raised in a connection call before booking. Browse our practitioners and start with a free, no-obligation 15-minute conversation.

• Browse our practitioners