How private is it, really? A practical look.

Worrying about who might find out is one of the most common reasons people put off asking about their drinking — so here is what actually ends up where, and who can see it.

You have probably run the scenario: you say something to a doctor, it goes in a chart, the chart follows you, and one day it surfaces — in an insurance file, a job process, a form you haven't imagined yet. So you keep researching instead of asking. Here's the short answer, up front: help for drinking is often more protected than the rest of your medical record, not less — but the protection depends on where you go, and you're allowed to ask exactly how it works before you disclose a thing.

Which rules actually protect you?

Two federal rules, and knowing both exist changes the conversation.

The one you've heard of is HIPAA, the general federal privacy rule for doctors, hospitals, and insurers. It's real, but it's more permissive than most people imagine. Your insurer sees what your visit is billed as. Other clinicians in the same health system can usually read the note. HIPAA limits how information moves outside the health-care world; inside it, information moves.

The one you probably haven't heard of is 42 CFR Part 2, a separate federal regulation covering records from substance-use treatment programs that receive federal support. It is much stricter than HIPAA: records under Part 2 generally can't be released without your specific written consent — not to other doctors, and, with narrow exceptions, not to law enforcement without a court order. The rule exists precisely because lawmakers understood that fear of a paper trail keeps people from treatment.

Which level of protection you get depends on where you go. That's the real question.

Who sees what, depending on where you go

The setting decides almost everything. A few common paths:

• Your primary-care doctor. A regular medical visit under HIPAA — the most common way in, and the least private. The conversation, any prescription, and any diagnostic code become part of your standard record; your insurance sees what's billed; other doctors in the same system can usually see the note.
• A specialized treatment program. If a program is federally assisted and mainly provides substance-use treatment, Part 2 applies, and the stronger written-consent rules come with it.
• A private practice or telehealth service. It depends on whether the practice qualifies as a Part 2 program — some do, some don't. One direct question settles it: "Do my records here fall under 42 CFR Part 2, or just HIPAA?" A provider who can't answer that plainly is telling you something too.

None of these paths is wrong. Plenty of people use their regular doctor and accept that the record will reflect the care, because a connected record has real advantages when other medications and conditions are in play. The point is that it's a choice, and you get to make it knowingly.

Can your employer find out?

Not from your doctor. Under HIPAA, an employer can't get your treatment information from a provider without your consent. They can ask you — and what you volunteer is up to you.

A few edges worth knowing about:

• Drug screens. Standard pre-employment panels typically don't test for alcohol or for the medications used to treat alcohol use disorder.
• Security clearances and some professional licenses. These applications may ask directly about substance-use treatment, and answering dishonestly carries its own serious consequences. If this is your situation, talk to a lawyer who knows that specific system — don't guess.
• Benefits paperwork. What gets billed to an employer-sponsored insurance plan can show up in claim summaries that a benefits team handles. If that worries you, your plan documents or benefits administrator can tell you exactly what's visible.

What about telehealth and apps?

Online care can be genuinely private — NIAAA's overview of telehealth for alcohol treatment describes video and phone visits as an established route to care, and for many people it's the difference between asking and not asking. But "online" adds a privacy question HIPAA doesn't fully answer: what happens to your data outside the medical record.

That's not hypothetical. In 2024, the FTC settled with an alcohol-telehealth company that had promised confidentiality and then shared users' health information with advertising platforms; the settlement banned it from disclosing health data for advertising. The lesson isn't "avoid telehealth." It's that with any online service, the privacy policy and the ad trackers matter as much as the medical-privacy law — and a reputable service will answer questions about both without flinching.

If you don't already have a clinician you'd trust with this conversation, that's a solvable problem rather than a dead end: Clero connects you with a licensed clinician by telehealth to talk through your drinking and whether a medication such as naltrexone is worth considering — and you should hold any service you look at, ours included, to the questions in this article.

Is paying cash more private?

It closes one channel, not all of them. Paying out of pocket means no insurance claim, so nothing routes through an insurer or the benefits paperwork that follows. The medical record itself still exists wherever you received care, under whichever rule covers that provider. Cash plus a Part 2 program is about as contained as records get; cash alone just narrows who gets told.

So is it safer to just say nothing?

It's tempting, and it's the one option with a real medical cost. Alcohol interacts with a long list of common medications, changes how procedures and anesthesia get planned, and — after heavy daily drinking — can make stopping suddenly dangerous. A clinician who doesn't know about the drinking can't plan around any of that. And if a hard stop has ever brought on shaking, confusion, hallucinations, or a seizure, that's not a privacy question at all — it's an emergency, and the answer is 911 or an emergency room.

There's also a middle path most people don't realize is allowed: ask about documentation before you disclose. "Before I get into why I'm here — how does this get recorded, and who can see it?" is a legitimate opening line, and a good clinician will answer it without needing a single detail first.

If being seen is the thing you're afraid of

That fear has plenty of company. NIAAA describes stigma as a pervasive barrier to alcohol care — the worry about being judged or labeled keeps people out of treatment as effectively as any practical obstacle. Yet by NIAAA's estimate, 27.9 million people ages 12 and older in the United States — 9.7% of that age group — had alcohol use disorder in the past year in 2024. Whatever you would say in that first conversation, the clinician has heard it. Probably this week.

The same federal data show how wide the gap between the two numbers runs: in 2024, about 2.1 million people with past-year alcohol use disorder — 7.6% — received alcohol treatment. That is a story about hesitation and access, with privacy fear as one of its quietest drivers — not evidence that the help doesn't work.

So here is the reassuring version of everything above. The protections are real. The strictest one was written specifically for this situation. And every question in this piece can be asked before you reveal anything at all — which means you can find out exactly how private it is, first.

This is general education, not legal or medical advice — if the stakes are specific (a custody case, a security clearance, a professional license), talk with a lawyer who knows that system. If you're having thoughts of harming yourself, call or text 988 now; and for confidential treatment referrals, SAMHSA's National Helpline is 1-800-662-HELP (4357).