HIPAA GUIDES
Often no, but it depends on how you work. HIPAA applies to covered entities and their business associates. An independent coach who is paid directly by clients and does not bill insurance is usually not a covered entity. A coach who works for a medical practice, or handles patient information on its behalf, may fall under that practice's HIPAA obligations.
HHS describes three kinds of covered entities: health plans, health care clearinghouses and health care providers. Providers are covered only if they transmit information electronically in connection with a transaction for which HHS has adopted a standard, such as billing a health plan.
HIPAA also reaches business associates, meaning people or companies that handle protected health information on behalf of a covered entity.
In that situation HIPAA usually does not apply to your business. This is general information, so check with an attorney if you are unsure.
If you work on behalf of a practice, that practice will usually ask you to sign a Business Associate Agreement or will treat you as part of its workforce.
Clients share personal health details with coaches and expect them to stay private. State privacy laws and consumer protection rules can still apply to the information you collect, even when HIPAA does not. Clear consent, limited access and secure tools are good practice either way.
Most independent coaches use the Aspire Builder Pro Standard plan at $97 per month. If you work with medical practices, take referrals that include patient records, or plan to add clinical services, the HIPAA plan at $297 per month includes a signed BAA. See the CRM for health coaches and pricing.
This article is general information, not legal advice. Vendor plans and policies change, so confirm details with each vendor before you rely on them. Last reviewed October 10, 2026.