Yes, you can call a hospital looking for someone, and staff can tell you a few specific things if you ask for the person by their full name and the patient hasn’t blocked their inclusion in the hospital’s directory. Under federal privacy rules, the hospital can confirm the person is there, tell you where they are in the building, and give a one-word description of their condition. What you won’t get is a search by description, a list of recent admissions, or any detail the patient has chosen to withhold.
What the Hospital Will Tell You
Hospitals maintain what HIPAA calls a facility directory. When you call and ask for a patient by name, staff can share three things from that directory: the patient’s location in the facility, a general condition described in broad terms such as “stable,” “fair,” or “critical,” and confirmation that the person is a patient there. Clergy asking about a member of their faith can also receive the patient’s religious affiliation. None of this requires the patient to sign anything; they only need to have been told about the directory and not objected.1eCFR. 45 CFR Part 164 Subpart E – Privacy of Individually Identifiable Health Information
The name requirement is strict. Hospitals will not read off a list of current patients, confirm anyone matching a description, or tell you whether “a man brought in this afternoon” is there. You need the person’s name before the hospital can say anything at all. If you’re not sure which facility someone was taken to, plan on calling several and asking for the person by name at each.2HHS.gov. Facility Directories
The directory also covers what happened after admission. Staff can tell you the patient has been treated and released, or that the patient has died, as long as the patient was included in the directory in the first place.3HHS.gov. Can the Fact That a Patient Has Been Treated and Released Be Part of the Facility Directory
Why You Might Be Told There Is No Information
Every patient is offered the chance to opt out of the directory at admission. A patient who says no is removed entirely, and from that point the hospital responds to any inquiry as though that patient is not there. The staff member won’t say “they’re here but chose privacy.” They’ll have nothing to tell you. From your end, this is indistinguishable from calling the wrong hospital.4eCFR. 45 CFR Part 164 Subpart E – Privacy of Individually Identifiable Health Information – Section 164.510
Patients can also opt out partway. Someone might allow their name and location to be shared but block any mention of condition, or the reverse. So even when the hospital confirms the person is there, you may not receive everything the directory rules technically allow.
If the Patient Cannot Speak for Themselves
A patient who arrives unconscious, sedated, or otherwise unable to answer isn’t automatically locked out of the directory. The provider can use professional judgment and include some or all of the patient’s directory information if doing so appears to be in the patient’s best interest. That might mean listing the name but not the specific unit, or the reverse, depending on the situation.5HHS.gov. If the Patient Is Not Present or Is Incapacitated, May a Health Care Provider Still Share the Patient’s Health Information
If the hospital already knows the patient’s prior preference — for example, that they didn’t want a particular family member contacted — the hospital must honor that even during incapacity. Once the patient can communicate again, staff must go back and offer the standard opt-in or opt-out choice.4eCFR. 45 CFR Part 164 Subpart E – Privacy of Individually Identifiable Health Information – Section 164.510
Beyond the directory, HIPAA allows providers to share information with family, friends, or others involved in the patient’s care when the patient can’t agree or object, again using professional judgment. Only information directly relevant to that person’s involvement in care or payment can be shared.6eCFR. 45 CFR 164.510 – Uses and Disclosures Requiring an Opportunity for the Individual to Agree or to Object
If You Hold Healthcare Power of Attorney
Holding healthcare power of attorney or a guardianship changes the conversation. HIPAA treats a personal representative as the patient, with the same right to request records, receive condition updates, and authorize or restrict disclosures.7HHS.gov. Personal Representatives
Expect the hospital to ask for documentation — a copy of the power of attorney, the guardianship order, or similar paperwork. Timing matters too. Some healthcare powers of attorney activate only when the patient loses capacity, so if the patient is conscious and competent, that kind of POA doesn’t yet give you access.8HHS.gov. Does Having a Health Care Power of Attorney Allow Access to a Patient’s Medical and Mental Health Records Under HIPAA
One exception limits this access: if a provider reasonably believes the patient has been or may be subject to violence, abuse, or neglect by the personal representative, the provider can decline to recognize that person’s authority. Having the paperwork doesn’t guarantee access in every case.
Calling About Your Child
Parents and legal guardians are generally treated as personal representatives of an unemancipated minor. That means hospitals share the child’s information with the parent the same way they’d share it with the child directly.7HHS.gov. Personal Representatives
Three narrow situations change that:
- The minor consented to care independently under state law, without parental involvement.
- The minor is receiving care at the direction of a court or a court-appointed individual.
- The parent has agreed that the minor and provider can have a confidential relationship.
Providers also keep the discretion to withhold information from a parent when they believe the child may be a victim of abuse or neglect, or when sharing could endanger the child. Outside these exceptions, a parent calling to locate their child should receive what the child would be entitled to.
Substance Use and Psychiatric Facilities
Federal law goes further for substance use disorder treatment than standard HIPAA does. Under 42 CFR Part 2, a facility that is publicly identified as providing only substance use diagnosis, treatment, or referral cannot even acknowledge that a specific person is a patient there. That confirmation requires the patient’s written consent or a court order.9eCFR. 42 CFR Part 2 – Confidentiality of Substance Use Disorder Patient Records
At a general hospital that happens to include substance use treatment, staff can confirm the patient is admitted as long as doing so doesn’t reveal the substance use diagnosis. In practice, a general hospital may confirm the admission without naming the unit if the unit itself would give away the diagnosis.
Psychiatric and behavioral health units within general hospitals often apply similar caution even though the standard directory rules technically apply. Many require the patient to sign a specific privacy release before staff will confirm the patient’s presence to any caller. Expect tighter restrictions than you’d find with a general medical admission.
What to Expect on the Call
HIPAA does not require the hospital to verify your identity when you call and identify yourself as a family member or friend. The staff member can take your word for it. Individual hospitals set their own verification policies, though, and some do ask for details like the patient’s date of birth or full legal name.10HHS.gov. If a Patient’s Family Member Calls a Health Care Provider, Does HIPAA Require Proof of Identity
Ask for the patient by full legal name. The operator will check the directory and give you one of three responses: the patient’s location and general condition, a statement that no information is available (which could mean opt-out, never admitted, or already discharged), or a transfer to the nursing unit. Treated-and-released status counts as an answer the hospital can give.
If you’re calling as a personal representative, expect a request for documentation. Calling first to explain the situation and then following up with a fax or email of your legal paperwork is a common approach, and hospitals handle these requests regularly.
If the Hospital Cannot Help
When a direct call doesn’t produce results, several alternatives exist.
Start with anyone likely to already know. Emergency contacts, family members, roommates, and close friends often get notified by the hospital directly, so they may have information the front desk can’t share with you.
If the person was in an accident or an incident that police responded to, the responding agency may be able to tell you which hospital they were taken to. Police reports often include that information, and law enforcement has its own HIPAA pathways for obtaining patient location data in situations like locating a missing person.11HHS.gov. HIPAA Privacy Rule – A Guide for Law Enforcement
Many hospitals will take a message for a patient through the front desk. The staff member won’t confirm whether the patient is there, but if the person is admitted and hasn’t restricted contact, the message reaches them. It respects the privacy rules while still opening a line of communication.
Hospital chaplains and spiritual care offices can also help. Chaplains often bridge patients and families when privacy or visiting restrictions get in the way. Call the main number and ask for the chaplain’s office; they may be able to facilitate contact when the front desk cannot.
If the person has a primary care physician you can reach, that doctor may know whether the patient was admitted or referred somewhere. The physician can’t share details without the patient’s consent, but they can often pass along your message.