Federal privacy law bars rehab facilities from confirming whether a specific person is a patient, so finding out what rehab someone is in usually means either getting that person’s written permission for the facility to talk to you or piecing together clues from outside the healthcare system. Calling around and explaining your relationship will not work, no matter how close you are. What follows is the realistic set of options, ranked from most to least likely to succeed.
Why the Facility Will Not Tell You Anything
Two federal laws work together to seal off substance use disorder treatment from outside inquiries. HIPAA sets baseline privacy standards for health information across the country.1CMS. Health Insurance Portability and Accountability Act of 1996 A stricter set of rules known as 42 CFR Part 2 governs substance use disorder records specifically, and was written to encourage people to seek treatment without fear their information will be used against them.2HHS.gov. Understanding Confidentiality of Substance Use Disorder (SUD) Patient Records or “Part 2”
Ordinary hospitals can maintain a directory and confirm a patient’s name, general condition, and room to anyone who asks for them by name, unless the patient has opted out.3eCFR. 45 CFR 164.510 Facilities publicly identified as places where only substance use disorder treatment is provided cannot do that. Under 42 CFR Part 2, they cannot even acknowledge an identified patient’s presence without the patient’s written consent or a court order.4eCFR. 42 CFR Part 2 – Confidentiality of Substance Use Disorder Patient Records Staff are trained to respond the same way whether the person is there or not, so a non-answer tells you nothing.
The Fastest Way: A Signed Release From the Patient
If you can reach the person at all, ask them to sign a release of information at the facility naming you as someone the staff can talk to. Once that release is on file, the facility can confirm the person is there, share treatment updates, and coordinate discharge planning with you. The patient can revoke the release in writing at any time, and the facility does not have to undo disclosures it already made in good faith before the revocation.5eCFR. 45 CFR 164.508
Many treatment programs prompt patients to designate an emergency contact and sign a release during intake, so if you were close to the person before they entered treatment, there is a reasonable chance you are already listed. You will not know unless you ask, and the facility can only tell you if the release exists. Some will confirm narrowly that no authorization is on file for the name you asked about, without saying whether the person is a patient. Others will not engage at all. Neither response tells you where the person is.
Working Outside the Healthcare System
When the patient is unreachable and no release exists, the fastest progress usually comes from information you can gather without involving any facility. Privacy laws restrict what treatment programs can tell you. They do not stop you from figuring it out on your own.
Talk to People in Their Life
Start with the people closest to the person: a spouse or partner, a roommate, siblings, close friends, anyone they might have confided in before leaving. One of them may know the facility name, or at least the city or region. A therapist, counselor, or clergy member the person was seeing beforehand may have made the referral, though they have their own confidentiality duties and may not be able to share what they know.
Check Insurance Records
If the person is on your health insurance as a spouse or dependent, Explanation of Benefits statements often name the provider and the dates services were rendered.6Centers for Medicare & Medicaid Services (CMS). How to Read an Explanation of Benefits A recent EOB showing charges from a residential treatment center gives you a facility name and roughly when the person was admitted. Most insurers post EOBs to an online portal, so if you are the primary policyholder, check there. Some plans suppress facility names for sensitive services, and 42 CFR Part 2 restricts certain billing disclosures, so this route does not always work.
Look at Financial Statements and Belongings
Bank or credit card statements showing payments to a treatment center, receipts, brochures, discharge paperwork from a previous stay, mail from a rehab program, or prescription bottles from a facility pharmacy can all point to a specific place. These methods feel intrusive because they are. Use your judgment about whether the situation justifies it.
Calling a Facility You Think They’re At
Once you have a likely facility, calling is a reasonable next step, but go in expecting the staff to neither confirm nor deny that your loved one is there. That is federal law, and violating it carries real penalties for the program.
What often works is asking to leave a message. Many programs will accept a message for a patient without confirming the patient exists, phrased along the lines of “if this person were here, we would make sure they got your message.” If the person is there and wants to reach you, they can. If you hear nothing back, you still will not know for certain whether they are there or simply chose not to respond. That ambiguity is the system working as intended.
You can also ask whether a release of information authorizing disclosure to you is on file. Some facilities will answer that narrow question; others will not. Either way, keep the tone respectful. The person answering the phone did not write the rules, and pushing on them closes whatever small opening might exist.
If You’re Searching for a Minor Child
Parents have more rights than other family members, but not as many as most parents expect. Under HIPAA, a parent is generally the personal representative of an unemancipated minor and can access the child’s medical records, with exceptions for situations like the minor lawfully consenting to treatment on their own, court-directed treatment, or a parent’s agreement to a confidential relationship between child and provider.7HHS. The HIPAA Privacy Rule and Parental Access to Minor Children’s Medical Records
42 CFR Part 2 adds a further restriction for substance use disorder treatment. In states that let minors consent to SUD treatment on their own, only the minor can authorize disclosure. The parent cannot access the records and cannot be told the child is in treatment unless the minor consents in writing.8eCFR. 42 CFR 2.14 – Minor Patients In states that require parental consent for a minor to enter SUD treatment, both parent and minor must consent to disclosures. There is one narrow exception: if the program director determines the minor lacks capacity to make a rational decision and faces a substantial threat to life or physical well-being, relevant facts can be disclosed to the parent.
Your practical rights depend heavily on where your child entered treatment. If it was a state where they could legally consent on their own, the facility may refuse to acknowledge your child is there until the child says otherwise.
Emergencies and Welfare Checks
The privacy rules have narrow openings for genuine emergencies, but they exist to protect clinicians who need to act fast, not to give family members a lever. Under 42 CFR Part 2, a program can share patient-identifying information with medical personnel during a real medical emergency when prior written consent cannot be obtained.9eCFR. 42 CFR 2.51 – Medical Emergencies That authorizes disclosure to emergency responders and hospital staff, not to family.
Separately, HIPAA allows a provider to disclose information without authorization when they believe in good faith it is necessary to prevent or lessen a serious and imminent threat, and the disclosure goes to someone reasonably able to prevent or reduce the harm.10eCFR. 45 CFR 164.512 The provider makes that call. You cannot invoke it from outside the facility to force a disclosure.
If you genuinely believe someone’s life is at risk and you cannot reach them, calling 911 or local law enforcement to request a welfare check is more likely to help than arguing exceptions with an admissions desk.
Court Orders and Guardianship
When every other route has failed and the stakes are serious enough to justify hiring an attorney, courts can compel disclosure or grant you legal standing over the patient’s records.
A Court Order Under Part 2
A judge can order a substance use disorder program to release records, but only on a finding of “good cause”: that no other reasonable way to get the information exists, and that the public interest in disclosure outweighs the potential harm to the patient, the treatment relationship, and the program. The court also has to limit the disclosure to the minimum necessary and restrict who sees it.2HHS.gov. Understanding Confidentiality of Substance Use Disorder (SUD) Patient Records or “Part 2” These orders are not granted casually, and the process can take weeks or longer.
Guardianship or Conservatorship
If the person is incapacitated, becoming their legal guardian gives you standing as their personal representative under HIPAA, meaning you step into their shoes for purposes of accessing records and authorizing disclosures. Someone holding a healthcare power of attorney, a court-appointed guardian, or a durable power of attorney covering healthcare decisions qualifies.11U.S. Department of Health and Human Services. Guidance: Personal Representatives
Guardianship requires a court petition, usually with an attorney. Filing fees generally run several hundred dollars, attorney fees add significantly more, and the process takes weeks to months depending on the jurisdiction and whether anyone contests it. Courts require clear evidence of incapacity before stripping another adult of decision-making rights. Guardianship fits situations involving severe cognitive impairment or prolonged inability to manage one’s own affairs. It is not a workaround for an adult who has simply chosen not to be reached.
When the Silence Is the Answer
Some people entering rehab deliberately do not tell family or friends where they are going, and the privacy laws described here exist in large part to protect that choice. For patients with controlling family dynamics, abusive relationships, or outside pressures, knowing that no one can force the facility to reveal their presence is often what makes entering treatment possible.
If you have reached out through mutual contacts, left a message with a facility, and heard nothing back, the silence itself may be the message. Pushing harder, whether through investigators, court filings, or repeated calls, can damage the relationship you are trying to protect and, in some cases, interfere with the person’s treatment. Letting them know you are available whenever they are ready, and then waiting, is sometimes the strongest thing you can do.