Your health information: what's private and what isn't

Many LGBTQ+ people worry about who can see their health information, especially in states with new restrictions. In a 2025 Movement Advancement Project survey, 73% of LGBTQ+ adults said state politics had harmed their well-being. Knowing what the law actually protects can help you make choices with confidence.

Who has to follow HIPAA

HIPAA, the federal health privacy law, applies to healthcare providers, health plans, and the companies that process their claims. It limits how they can use and share your information.

Who doesn't

Most health and wellness apps, fitness trackers, and websites you use on your own aren't covered by HIPAA. Their privacy policies and the Federal Trade Commission set the rules instead. Read what an app says it does with your data before you share something sensitive.

Rights you can use

• See and get a copy of your records. Providers generally have to respond within 30 days.
• Ask to correct mistakes, including a wrong name or wrong information.
• Ask for confidential communications. You can ask to be contacted at a different phone number or address, which can matter if you share a mailbox or an insurance plan.
• Ask who your information was shared with. You can request a list of certain disclosures.

Questions worth asking your provider

• "What will be written in my chart about this?"
• "Who will be able to see it?"
• "Can you send letters and calls to a different address or number?"

If you think your privacy was violated

You can file a complaint with the Office for Civil Rights at the U.S. Department of Health and Human Services. In general, you need to file within 180 days of when you knew about the problem.

This article is general information, not legal advice.