Notice of Privacy Practices
Effective March 6, 2022 · Last updated May 30, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Who we are
NorthSight Recovery (“NorthSight,” “we,” “us”) is a licensed behavioral health provider operating outpatient clinics and NARR-certified recovery residences in Tempe, Mesa, and the greater Phoenix metropolitan area. As a covered entity under HIPAA and a Part 2 program providing substance use disorder services, we are required by law to maintain the privacy of your protected health information (“PHI”), give you this notice of our legal duties and privacy practices, and follow the terms of the notice currently in effect.
How we may use and disclose your PHI without your authorization
With limited exceptions, federal law (42 CFR Part 2) requires your written consent before we disclose PHI related to substance use disorder treatment. The following uses and disclosures are permitted by HIPAA and Part 2 without separate authorization:
- Treatment. We use your PHI to provide, coordinate, and manage your care, including consultation with other providers within NorthSight.
- Payment. We use your PHI to bill and collect payment for treatment — for example, to verify eligibility, obtain prior authorization, and submit claims.
- Healthcare operations. We use your PHI to evaluate the quality of our care, train staff, conduct accreditation reviews, and run our business.
- Medical emergencies. We may disclose PHI to medical personnel to the extent necessary to meet a genuine medical emergency.
- Required by law. We will disclose PHI when required by federal, state, or local law, including reports of suspected child abuse or neglect or a crime committed on our premises or against our staff.
- Court orders. A court order issued in compliance with 42 CFR Part 2 and accompanied by a subpoena may compel disclosure.
- Research and audits. Qualified research, audits, or program evaluations that meet Part 2 requirements may receive limited PHI under written assurance of confidentiality.
Uses and disclosures that require your written authorization
Most other uses or disclosures of your PHI — including marketing, sale of PHI, sharing of psychotherapy notes, and most disclosures to family members, employers, or third parties — require your written, revocable authorization. You may revoke an authorization at any time in writing, except to the extent we have already acted on it.
Your rights
- Access. You may inspect and obtain a copy of your PHI in our designated record set, in the form and format you request when readily producible.
- Amendment. You may request that we amend PHI you believe is incorrect or incomplete. We may deny the request under limited circumstances and will provide a written explanation.
- Accounting of disclosures. You may request an accounting of certain disclosures of your PHI made in the six years prior to your request.
- Restrictions. You may request restrictions on uses or disclosures for treatment, payment, or healthcare operations. We are not required to agree to all requested restrictions but will accommodate reasonable requests when possible.
- Confidential communications. You may request that we communicate with you about medical matters in a specific way or location.
- Paper copy. You have the right to obtain a paper copy of this notice upon request, even if you have agreed to receive it electronically.
- Breach notification. You will be notified in the event of a breach of your unsecured PHI as required by HIPAA.
Special protections for substance use treatment information (42 CFR Part 2)
Federal law and regulations protect the confidentiality of substance use disorder patient records maintained by this program. Generally, the program may not say to a person outside the program that a patient attends the program, or disclose any information identifying a patient as having a substance use disorder, unless: (1) the patient consents in writing; (2) the disclosure is allowed by a court order; or (3) the disclosure is made to medical personnel in a medical emergency or to qualified personnel for research, audit, or program evaluation.
Violation of the federal law and regulations by a program is a crime. Suspected violations may be reported to appropriate authorities in accordance with federal regulations. Federal law and regulations do not protect any information about a crime committed by a patient either at the program or against any person who works for the program, or about any threat to commit such a crime. Federal laws and regulations do not protect any information about suspected child abuse or neglect from being reported under state law to appropriate state or local authorities.
Our duties
We are required by law to maintain the privacy and security of your PHI, provide you with this notice, and abide by the terms of the notice currently in effect. We reserve the right to change this notice; the revised notice will apply to all PHI we maintain. Updated notices will be posted at our facilities and on this website.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.
Website privacy
This website collects limited, aggregated analytics (page views, device type, referring source) used solely to improve site performance. We do not sell visitor data. Forms on this site that collect personally identifiable information are transmitted over encrypted connections and stored in HIPAA-aligned systems.
How to contact us
Privacy Officer
NorthSight Recovery
1440 E Southern Ave, Tempe, AZ 85282
privacy@northsightrecovery.com
800.905.6419