Is privacy no longer sacred in an age where everyone is expected to own a cellular phone with camera and learn to post on social media? The importance of the The Health Insurance Portability and Accountability Act (HIPAA) for healers and other community members can not be understated even though it has only been enacted since 1996.
If you’ve ever asked, “Is it okay to post this group photo?” or
“How do I talk about my journey without accidentally disclosing too much about someone else’s?”, you’re not alone.
As members of the Spiritual Depth Movement, where vulnerability and authenticity are our strengths, we also hold a sacred responsibility: to protect the privacy and safety of those who trust us. Whether you’re running a support group, hosting a Zoom gathering, or blogging about your own experience, this guide offers practical HIPAA-compliant tools for healers and thoughtful practices to keep you grounded, safe, and more mindful in the relationships with your diverse community.
Key notes
- How do we safeguard privacy online for each of us?
- Online support groups and public forums – what does HIPAA mean there?
- What kinds of tools are available for us?
- Printable one sheet LINKED for group leaders at the bottom
Understanding HIPAA for Healers in the Context of Online Healing
HIPAA (Health Insurance Portability and Accountability Act) is a U.S. law that protects the privacy and security of individuals’ medical information. While it mostly applies to healthcare providers and entities who bill insurance (like therapists or clinics), it offers an important framework for anyone holding space for others—especially in digital or semi-public spaces.
Even if you’re not a “covered entity” under HIPAA law, following HIPAA-like guidelines is an ethical choice that protects your relationships, reduces harm, and supports long-term trust.
1. Use HIPAA-Compliant Email for Healers’ Sensitive Conversations
Email is still one of the most common ways we communicate with clients, peers, and collaborators. But not all email is created equal. Gmail, Yahoo, and Outlook accounts are not HIPAA-compliant by default.
✅ Recommended HIPAA tool for Healers: ProtonMail with Proton Drive (Switzerland-based)
- End-to-end encryption: Messages are encrypted from the moment you send them.
- No ads or third-party trackers: Keeps data private and secure.
- HIPAA-aligned security practices, even if not technically certified under U.S. law.
Proton also offers Proton Drive, which can be used to securely store or share session notes, flyers, and community materials.
Pro tip: Ask community members if they are open to secure email exchanges and explain why you’re using encrypted tools. Language like, “I care about protecting your story. That’s why I use ProtonMail,” builds trust.
2. Choose HIPAA-Compliant Video Conferencing Platforms for Healers
If you host support groups, workshops, or storytelling sessions online, the video platform you choose matters. Some platforms log user data or share it with advertisers. Others don’t give you control over recordings.
✅ Best HIPAA-Compliant Video Tools for Healers (2025)
| Platform | HIPAA-Compliance | Key Features | Cost |
| Zoom for Healthcare | ✅ Yes (with BAA) | Waiting room, screen share, recording alerts | $$$ |
| Doxy.me | ✅ Yes (BAA included) | Browser-based, no downloads, simple UI | Free/$ |
| Thera-LINK | ✅ Yes | Designed for therapists, includes scheduling | $$ |
| VSee | ✅ Yes | Telehealth-friendly, low-bandwidth | $ |
What is a BAA?
A Business Associate Agreement is a required contract that ensures the platform will handle Protected Health Information (PHI) according to HIPAA rules. If your platform doesn’t offer this, it’s not HIPAA-compliant.
3. Before You Hit Record: Consent and Clear Agreements
Recording group sessions, interviews, or Zoom calls? Make sure everyone knows what’s happening and why. Consent must be informed, voluntary, and specific.
✅ Say This Before Recording:
“Hi everyone, I want to let you know that this meeting will be recorded. The purpose of the recording is [archival/sharing/notes]. You can turn off your camera or leave the room if you’re not comfortable. By staying, you agree to be part of this recording.”
❌ Avoid This:
“Is it okay if I record?” (without clarifying where and how it will be used)
Even better—use a consent form or a quick chat box check-in like:
“Type ‘yes’ if you consent to recording.”
4. Ethical Storytelling and Sharing Your Journey Online
When we blog, post to Instagram, or publish a newsletter, we often want to share breakthroughs, breakthroughs, and breakdowns. But it’s easy to mention someone else’s story without realizing it.
✨ Practice these HIPAA Digital Storytelling Ethics for Healers:
Ask before tagging or quoting: A quick DM like, “Can I share what you said in group?” respects their sovereignty.
Use composites or metaphors: “A friend once told me…” or “I’ve worked with people who…” creates emotional truth without naming names.
Delay posting sensitive content: Wait a few days or weeks before posting, especially after emotional moments.
Blur identifying details: Change names, locations, and timelines.
5. Social Media, HIPAA, and the Slippery Slope of Oversharing for Healers
Social media can be a powerful tool for community-building and self-expression. But when we mix our personal lives with our professional or activist work, lines get blurry.
Here are boundaries to try on:
🔒 Red Light: Avoid Posting TMI
- Screenshots from support groups or private forums.
- “Look who came to my office today!” selfies, even with permission.
- Stories involving someone else’s diagnosis or trauma without explicit consent.
🟡 Yellow Light: Post with Caution
- Group events: get written consent from participants.
- Quotes: attribute anonymously, or ask directly.
- Personal reflections about a shared journey.
🟢 Green Light: Safer to Share
- Resources, tools, or tips (like this blog post!)
- Your own inner healing process (without tmi like names)
- Art you’ve created as a way to process emotion
6. Know the Difference Between “Public” and “Shared”
Many of us were raised on platforms that blur the lines between public and private: Facebook Groups, Instagram Lives, Discord servers, even email threads.
🔍 Ask Yourself Before Posting:
- Is this mine to share?
- If this was about me, would I want it online?
- Could someone be harmed if this post were taken out of context?
7. What If You Made a Mistake?
We all do. The spiritual path isn’t about perfection—it’s about repair, humility, and growing together.
If you overshared:
- Take the post down as soon as possible.
- Reach out to the affected person with a sincere apology.
- Reflect on what systems or habits you need to adjust.
8. Holding Space Online with Care
Facilitating online space for others’ transformation is sacred work. Here are tips for trauma-informed, privacy-centered leadership:
- Open each meeting with a confidentiality reminder.
- Use breakout rooms with clear intentions.
- Name the power dynamics: “As a facilitator, I see your stories as sacred and confidential.”
- Empower people to opt out: “You don’t have to answer every question.”
9. Tools Checklist: What to Use for Privacy
Here’s a round-up of tools that can help you stay grounded and ethical online:
| Need | Tool | Notes |
|---|---|---|
| Secure Email | ProtonMail | Free plan available; privacy-first |
| Video Calls | Zoom for Healthcare / Doxy.me | Make sure BAA is in place |
| File Sharing | Proton Drive / Tresorit | End-to-end encrypted |
| Consent Forms | JotForm HIPAA / Google Forms (for non-HIPAA uses) | Use for pre-session check-ins |
| Passwords | Bitwarden / 1Password | Avoid sticky notes! |
| Scheduling | Calendly (with privacy settings) | Avoid auto-publishing sensitive calendar names |
10. You Deserve to Share Your Light, Safely
At Spiritual Depth Movement, we believe healing is relational. We heal in community, and community thrives when there’s trust. Using HIPAA-style tools isn’t about fear—it’s about love. It’s about creating a container strong enough to hold the truths we share, so no one gets burned by oversharing or unintentional harm.
So go ahead—share your story, your gifts, your grief, and your wisdom. Just do it with consent, care, and a clear boundary. The internet is wild terrain, but with the right tools, you can walk it like sacred ground.
It’s okay to be vulnerable because that is the only way we learn about who we are. We want to be mindful of why and when we’re sharing it so that we’re doing it with meaningful purpose.
Final Reflection Questions
- What is one habit I can shift this month to make my online spaces more secure?
- Have I ever accidentally shared something about someone else? How did I handle it?
- What tools would help me feel more grounded before posting or emailing?
DOWNLOAD: printable 1-page checklist version of this for peer group facilitators or therapists
