Confidentiality & Privacy
We are committed to providing confidential medical and mental health care for all BU students. Learn more about your rights and responsibilities as a patient at SHS.
State privacy laws protect the following types of care:
Confidential Communication Channels
Healthcare often involves communicating about sensitive topics. We take your privacy seriously.
For all of your private health communications, please use Patient Connect. The Patient Connect platform is a confidential space that protects your private information. Do not email any SHS providers or departments your private health information, as email is not confidential and is vulnerable to data breaches.
The following health information must be securely communicated through Patient Connect:
- Your past or current physical or mental health condition
- Any treatment details for your physical or mental health conditions
- Identifiers such as address, birth date, and social security number
- Results of any medical tests
- Prescription details
SHS recommends that you do not share your Patient Connect with anyone, even family members. If a family member asks for access to any of your private information, we recommend sharing parent access in MyBU Student Portal as an alternative to sharing passwords.
Learn more about how to contact SHS
Text Messaging
Text Messaging Terms & Conditions
SHS uses text messaging to send appointment reminders and other updates. Message frequency will vary. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. Our privacy policy is below.
To opt out, reply STOP to any text message. Or opt out via the Patient Connect portal:
- Go to Patient Connect
- Click Profile
- Find Text Messaging and click the Edit button
- Uncheck the box for “I would like to receive text messages”
Text Messaging Privacy Policy
SHS does not share or sell your mobile number or personal information with third parties for marketing or promotional purposes. Additionally, your opt-in consent to receive these messages is private, and this information will never be shared with third parties.
Your use of Boston University’s websites, applications, programs, and online or mobile products or services is at all times subject to the Boston University Digital Privacy Statement.
FAQs
What laws and policies apply to me?
Privacy laws in Massachusetts protect the confidentiality of your medical records at Student Health Services, even though records at SHS are considered educational in nature and therefore are covered under FERPA privacy legislation that allows parents access to these records in some circumstances. This policy applies to all forms of protected health information (PHI): electronic, written, and oral.
Are there times when a healthcare provider has to break confidentiality?
In rare situations, a provider must break confidentiality to keep people safe. This includes times when a patient is in immediate danger of harming themselves, such as expressing serious, imminent intent to self-harm, and the provider needs to involve others to ensure the patient’s safety. It also includes situations where a patient makes a credible and specific threat to harm someone else, in which case the provider is legally required to warn or protect the potential victim. In both circumstances, the provider shares only the minimum information necessary and acts with the goal of protecting everyone’s safety.
If I'm on my parent/guardian's insurance plan, can they see my information, or what tests I get done, like an STI test?
An Explanation of Benefits or EOB is a statement from your health insurance provider that may describe health care services delivered, including diagnosis or test codes. This means that if your parent or guardian is the holder of the insurance policy you use, they may see that a test was performed, but not the results.
In Massachusetts, if you are on another person’s insurance plan, you can request that information about care for certain services be kept confidential. You will need to ask that the EOB be sent to you and not the policyholder.
State privacy laws protect the following types of care:
To do this, you will need to locate your subscriber number and contact information for your insurance policy(s). When you call, request that the EOB form be sent directly to your address and not to the policyholder, or that you would like to only receive it online instead of receiving a copy in the mail. Your health insurance plan may require you to request in writing, and they will give you instructions for how to do that.
Here is a script you can use when you call your insurance company:
Hi, my name is ______________. My policy number is _____________.
I do not want lab test information from __________ (date) through LabCorp to be sent to my parents/guardian.
I want the EOB statement to be sent to ____________________(address/email)
The best time to make this call is before you receive any medical services. However, you can still make this request after you receive health care services, ideally within a few days of the date of service. You can call your insurance company to find out the status of your request or for confirmation.
What is a release of information?
Is my information ever shared with my parents or anyone else?
If you are over the age of 18, you can decide whether or not to authorize (allow) your health information to be shared with parents or a trusted adult. You also get to choose which information you are willing to share.