Decision guideLast updated: May 6, 2026

Can my spouse see my STD test on insurance?

By default, yes — the EOB goes to the policyholder. The good news: HIPAA gives every adult the right to ask their insurer to redirect those communications, and most insurers will honor it.

Short answer

  • Default behavior: if your spouse holds the policy, the Explanation of Benefits is mailed (or made available in the portal) to them after each claim.
  • Federal protection (everywhere): HIPAA §164.522 lets any patient request confidential communications — alternate address, phone, or electronic-only delivery — for their own care. You don’t need to give a reason.
  • State protection (some places): California (AB 1184), Colorado, Maryland, Massachusetts, New Jersey, New York, Oregon, and Washington reinforce the federal right with state statutes. CA is automatic; the others require a request.
  • The fully private route: cash-pay at a free clinic, cash-pay lab, or at-home kit. No claim, no EOB.

Get a personalized answer

Three questions — state, who holds the plan, whether you’ll bill insurance — and we tell you exactly how exposed an STI test would be on the EOB and what to do about it.

Open the privacy check tool →

Why an EOB shows up at all

Insurers send Explanation of Benefits statements after they process a claim. The EOB is not a bill — it’s a summary of what the insurer paid, what you owe, and what service was rendered. The trouble for privacy is that “what service was rendered” usually includes the provider name, the date, and procedure codes that can identify the visit type.

Federal regulations require insurers to send EOBs to the policyholder by default, even when the service was for a covered dependent.

HIPAA §164.522: the right that applies everywhere

The federal HIPAA Privacy Rule, at 45 CFR §164.522, gives every patient the right to request that their health plan use alternative means or alternative locations for confidential communications about their own care. This is the legal basis for “send my EOBs to my email, not my spouse’s mailbox.”

Practical steps:

  • Log into your insurer’s member portal. Look for “Confidential Communications,” “Privacy Preferences,” or “Communication Preferences.”
  • Specify the alternative: a different mailing address, your direct phone, your direct email, or electronic-only delivery.
  • If there’s no portal option, call the member services number on your card and ask: “I’d like to submit a HIPAA §164.522 confidential communications request.” Get a confirmation number.
  • Submit the request before your visit. Retroactive protection is harder once the EOB has been mailed.

Source: HHS HIPAA Privacy Rule guidance.

The ERISA wrinkle (employer plans)

If your spouse’s plan is offered by a large employer, it may be a self-funded ERISA plan rather than a fully insured plan. ERISA plans are regulated under federal law and not by state insurance commissioners, which means state EOB-confidentiality statutes (like CA AB 1184) may not bind them in the same way.

The federal HIPAA §164.522 right still applies to ERISA plans — that doesn’t change. But how the plan administrator implements it can vary. Ask explicitly whether the request will affect EOBs, the member portal, and pharmacy-benefit communications, and get the answer in writing.

When cash-pay is the cleaner answer

A confidential communications request is a paperwork solution: it works when the insurer follows it. If you don’t want to depend on that, paying cash sidesteps the entire EOB pathway because there’s no claim.

  • Public clinic: Title X and county-funded clinics often offer free or sliding-scale STI testing without billing insurance.
  • Cash-pay lab: Labcorp OnDemand from $39 (CT/GC), STDcheck 10-panel ~$139. Same Quest or Labcorp draw sites; no insurance involvement.
  • At-home kit: $79–$149. Watch the shipping address — a discreet mailer is still a delivery to your door.

A few honest caveats

  • Shared portal access: if your spouse has login access to the insurer’s member portal, claims may still be visible there even if the EOB itself is suppressed. Check whether the request applies to portal visibility.
  • Pharmacy benefits: if treatment requires a prescription, that often hits the pharmacy benefit manager, which has its own communications. Ask whether your request covers PBM messages.
  • Shared address by default: if your insurer has the household address on file, mailed communications still arrive there until you change the address or switch to electronic-only.
  • Joint financial accounts: a copay charged to a shared HSA or FSA can show up on a statement your spouse reviews.

Sources: HHS HIPAA Privacy Rule · California AB 1184 · CDC screening recommendations.

This page is a decision aid — general information, not medical advice. See methodology for how we rank options.

Found this useful? Pass it on.