David Nowak.
Home/Decision brief · Therapy & mental health practice
Decision brief

Can a therapist use AI safely?

9 min read · Sep 2026 · Every tool linked to its full review · Not legal advice — your state board and carrier have the final word
Straight answer

Yes — for the practice around the sessions, not the sessions themselves. Psychology-website copy, workshop materials, de-identified journaling prompts, insurance-appeal drafts with the details stripped.

But your floor is higher than any other solo business: a client's session content is the most sensitive category of information that exists, and the AI that helps you most — drafting, reflecting, summarizing — is exactly the use that touches it. The answer is yes with a structural condition, not a list of exceptions.

The hard line

One line you can't cross

Session content — anything a client said, felt, or disclosed — is protected health information under HIPAA, the same law that governs a dental practice but with a harsher reality attached: your clients' trust is the treatment.

The most common AI mistake in a practice isn't a hack. It's a well-meaning paste: "client with panic attacks presented today with..." typed into a free chatbot to find a worksheet. That sentence just left your control — likely into a system that trains on what it's given.

The line — non-negotiable

Anything a client said — content, notes, even "I saw a client who..." with the details attached — never goes in a public tool. De-identify completely, or use AI that runs on your own machine where nothing leaves the room.

The de-identification bar is higher here than elsewhere: "a client with panic attacks" isn't de-identified if your town has one therapist. Combine a detail with your practice and it points at a person. When in doubt, don't paste it at all — the local option exists for exactly this reason.

Safe to start

What's safe to start with

Four uses with real payoff for a practice. Each links to the vetted review that covers it.

Session work, run locally
Reflection prompts, worksheet drafts, psychoeducation handouts — with the client's details kept out by using an AI on your own machine: no account, no cloud, nothing sent anywhere.
Ollama
$0 forever · nothing leaves the room
Practice website and content
Pages that describe your approach, workshop outlines, blog posts on coping skills — public-facing work with no client content in it.
Claude · ChatGPT
free tiers cover a solo practice
Answering the phone
While you're in session, the phone still rings: an AI agent takes scheduling and general questions, and hands anything personal to you. Compliance is the deciding factor.
Retell · Bland
self-serve / bundled HIPAA agreements
Forms, worksheets, admin
Intake paperwork templates, billing appeal letter structures, supply and office checklists — nothing a client has said required.
ChatGPT · Gemini
free tier is enough

The phone-agent rule, restated for this practice: a caller in crisis may say identifying things — their name, their situation, sometimes their state of mind. Rosie publishes no HIPAA statement anywhere; Goodcall shows no confirmed independent security certification in its public record. For a practice, that settles it: Retell signs a HIPAA agreement self-serve at no extra cost, and Bland includes HIPAA in its standard rate.

The voicemail-only tier of the cheaper agents still works fine for "hours and address" duties.

Never

What never goes in a public tool

Never

Session notes or summaries — even "brief" versions. The notes are the client.

Never

"A client who..." stories with the identifying details kept — presentation, age, occupation, and town together point at a person.

Never

Crisis-related content — anything about a client's risk of harm goes to your emergency protocol, never to a chatbot for guidance.

Never

Scheduling details with names — "Jordan, Tuesdays at 4, EMDR" is a client record, and a public tool is the wrong place for it.

The test that holds up to a client asking how their information was handled: if it would change what they told you, don't put it in the tool. The treatment depends on what they can say in the room.

Before you sign

The five-minute vendor check

Run any vendor through these before money moves. A good vendor answers plainly. A deflecting one tells you what you need to know.

  1. Will you sign a business associate agreement? Anything that will ever hear a client's name — phone agent, scheduling tool, note-taking app — needs this. Retell and Bland hand it over; a vendor that hedges has answered.
  2. Where are recordings and notes stored, and who can see them? You want a location, an encryption answer, and a named access policy. "Only authorized personnel" is not an answer.
  3. Is my data used to train anything? A therapy-adjacent tool training on session content is a category error. The answer must be no, on the tier you're buying, in writing.
  4. What happens to everything if I cancel? Notes, recordings, intake records — deleted on their end, in writing, with your files exported whole first.
  5. Does the AI ever respond to clients directly? If it does, what stops it from improvising clinical advice? A phone agent that answers "should I be worried about these thoughts" is a liability, not a feature.
If it goes wrong

If something goes wrong

AI doesn't need to be perfect in a practice — it needs to fail quietly and get caught. Three steps, in order:

Step 01

Stop using the tool for anything client-related the same day. Don't test it with real content.

Step 02

Write down what went where: which tool, what content, how much, how long ago. This record is what your carrier and your board will ask for.

Step 03

Call your professional liability carrier before you decide what else to do — HIPAA breach timelines apply, and the call costs you nothing.

This is general information, not legal advice. A session note leaking from a tool is recoverable; the way it's handled is what clients remember.

Your call

The honest trade-off

A therapist's trade-off is the sharpest version of the one every solo practitioner faces: the help you want most — reflecting on session material, drafting between-session notes — is exactly the help that touches the client. The honest resolution isn't caution; it's structure. Public tools for the practice's public face. The local model for anything that carries client content, at $0 and behind your own door. Documented-compliance phone agents for the schedule line. Three lanes, one habit each.

What it protects is the thing the practice runs on: clients who can say anything in the room because they know where it goes. That promise is worth more than any workflow the AI could speed up.

The 30-second takeaway

Yes to AI for practice content, worksheets, and the phone — no to session content in public tools, ever. Run the reflective work locally where nothing leaves the room, put a HIPAA-signed agent on the schedule line, and when de-identifying feels hard, that's the signal not to paste it.

I'm David. I build AI that keeps your data yours.

David Nowak

Twenty years building software for businesses like yours — cloud tools when they fit, your own machines when the data demands it. Fixed fee projects starting at $500, or a standing second opinion on your AI and software decisions from $300 a month.

Book a session

Bring one real problem. You leave with a plan — whether we work together or not.

Prefer writing first? Enable JavaScript to see the email

"Most companies are selling you fear and complexity. He cuts through the bullshit and just fixes things. That's what partnership looks like."
Jim · Owner, media production company · more testimonials