4 Ways to Navigate Technology Use in Counseling Practice

Technology is central to my telehealth-only counseling practice, but it supports the work while the therapeutic relationship leads it. I use SimplePractice as my electronic health record and secure video platform for scheduling, consent, and documentation. Records are stored digitally with encryption and role-based access, and I use HIPAA-eligible tools under business associate agreements (BAAs), so client information is protected without paper files.

I also use Blueprint for Therapists to support measurement-informed care and simplify documentation. When AI features assist with note structure, I review and finalize every record myself; AI will never diagnose, make clinical decisions, or replace my judgment, ever. If a client feels uncomfortable with the use of the AI tool, they have the ability and right to refuse or withdraw consent at any point for its use during sessions. If I suggest between-session apps (for focus, mindfulness, or emotion tracking), they're optional; I explain the possible privacy concerns and always offer non-app alternatives.

For client communication, I encourage secure portal messaging within my EHR. When email is necessary, I use Hushmail to send encrypted messages. Some services market themselves as "HIPAA-eligible," but that may apply only to internal use; it's important for due diligence to confirm that the vendor will execute a BAA and cover patient communications outside the organization.

Ethics and Best Practices

My ethics and best practices are based on the American Counseling Association (ACA) Code of Ethics and applicable privacy laws, including HIPAA. In practice, this means I provide informed consent tailored to telehealth, covering benefits, limitations, privacy, and technology risks. I integrate security into my workflow by using HIPAA-eligible platforms under BAAs with encryption, access controls, and audit logs, and I minimize the use of email or SMS for protected health information. I verify each client's physical location at every session and only serve clients in states where I am licensed. To preserve continuity of care, I use a simple backup such as a phone call if video fails. I maintain digital boundaries by using portal messaging, defining response times, and declining social media connections to protect confidentiality. Finally, I support client choice and accessibility with simple technology guidance, encouragement to use private spaces and headphones, and low-tech alternatives when needed.

When I moved my trauma practice online, I discovered that using technology carefully isn't just a convenience; it raises important ethical questions. In my experience, clients often trust the medium less than the message, so attending to how we use technology becomes part of the therapeutic work. Three areas stand out as essential: privacy and security, risk management, and clarity around consent.

Privacy and Security

I always insist on using secure, encrypted video-conferencing software, so client data is protected and confidential. I walk through the limitations of online platforms with each person and remind them that virtual sessions require thoughtful choices: where they sit, how private their space is, and how to keep their connection secure. I think it's important that clients understand these privacy risks up front.

Risk Management and Emergency Planning

In online therapy, it's harder to respond to crises or emergencies. That's why I make it a practice to obtain a client's location at the start of each session, and I ask for emergency contact information. I also talk through what we would do if a crisis happened during the session, who they could reach locally, how to access help, and whether I would need to break privacy in a safe, ethical way. In my opinion, having a clear safety plan ahead of time reassures clients and allows me to step in effectively if needed.

Informed Consent and Boundaries

I spend time with clients reviewing how online therapy is different from in-person work. I clarify expectations about session timing, message response, and follow-up care. In my experience, some clients worry about recording, data storage, or sharing therapy notes. By talking through these topics clearly and asking for consent verbally and in writing, clients are better equipped to engage and feel safe. I think this upfront transparency builds trust and reduces misunderstandings later.

Overall, I find that online trauma therapy can be just as effective as in-person work, but it demands a more intentional approach to ethics and communication. When clients see that I've thought through and explained how we'll protect their privacy, respond to crises, and respect their boundaries, they tend to relax more into the therapeutic process. This ethical groundwork isn't extra; it's a foundation that allows healing to unfold safely and genuinely.

Technology is a double-edged sword. While it can be a source of effective access for counseling, there are pitfalls that need to be considered. Platforms must be HIPAA compliant, even in email communication and the client portal. I want technology for my clients to be easily accessible, whether for the delivery of telehealth services or filling out initial documents.

For marginalized populations, there is a need to keep information in counseling-based systems concise and considerate of what is stored in health records. Information with regard to sex and gender, diagnoses, and neurodivergence needs to be handled with a culturally competent approach. I ask clients about their comfort level with my forms, assure them of the purposes of the technology systems I use, and take time to update my approaches in order to center clients who are most affected by too much data collection.

I think of technology as a bridge, not a barrier. It allows me to meet people where they are while maintaining the human connection at the heart of therapy. I ensure that the tools I use are safe and private, and I'm clear about boundaries so that technology supports healing instead of hindering it. Most importantly, I want every client to feel respected and cared for, whether we're meeting online or sitting together in person.