Privacy Policy
How we handle your information at intake and beyond.
Last updated: 17 May 2026
Stepping Stone is subject to federal substance-use confidentiality rules (42 CFR Part 2), HIPAA, and California state law. This policy explains what that means in plain language.
What we collect
We collect only the information needed to evaluate fit for our programs and stay in contact with you about your care: name, contact details, age, county of residence, insurance status, and the substance-use and health information you choose to share on the intake form. We do not buy or rent personal information from third parties.
How we use it
Intake information is reviewed by the Stepping Stone intake team and the clinical staff directly involved in your screening. We use it to determine program fit, prepare for our first conversation, and — if you enter the program — build your care record.
How we share it
We do not sell your personal information. We share it only with your care team, with people you explicitly authorize (in writing), and where required by federal substance-use confidentiality law (42 CFR Part 2) or California law. The protections of 42 CFR Part 2 are stronger than HIPAA and apply to everyone we work with.
Your rights
You can request a copy of the information we hold about you, ask us to correct it, ask us to delete it (subject to the records-retention rules we are bound by), and withdraw consent for any future contact. Email privacy@steppingstonesd.org or call (619) 278-0777 ×110.
Questions about this policy? privacy@steppingstonesd.org · (619) 278-0777 ×110