Hushmail vs Gmail for Canadian therapists
Updated
- Hushmail says its servers are in Canada, and it offers dedicated encrypted email on its paid healthcare plans
- Default Gmail cannot guarantee encryption in transit, which is hard to defend under PHIPA or PIPA safeguards duties.
- Adding an encryption layer to Gmail avoids email migration entirely
- Hushmail has the edge on Canadian data residency for email content
- Gmail with encryption keeps your Google Workspace workflow intact
- Neither option covers every requirement; the right choice depends on your practice
Most Canadian therapists already use Gmail. It’s where their calendar lives, where their Drive files sync, where their video calls happen. Hushmail offers a dedicated encrypted service: either your whole inbox, or a separate place you send secure messages from.
That’s a real option. But it’s not the only one.
If you search “Hushmail vs Gmail” right now, every result on page one is Hushmail’s own marketing. There’s no independent comparison written from the perspective of a Canadian therapist who actually uses Google Workspace. This is that comparison.
We’re evaluating Hushmail, default Gmail, and Gmail with an encryption layer against what PHIPA and Alberta and BC PIPA actually require. No vendor is going to come out looking flawless here, including Curio.
Quick comparison table
| Feature | Hushmail | Gmail (default) | Gmail + encryption layer |
|---|---|---|---|
| Encryption method | Built in (recipient reads on Hushmail’s secure web page) | TLS only (server to server) | TLS enforced on send, secure portal when a client’s server can’t do TLS |
| Pricing | Per mailbox on its paid healthcare plans; check Hushmail’s current pricing | Included with Google Workspace (Business Starter US$7.00/user/month, annual plan; Google prices in USD for Canada) | Google Workspace + encryption layer fee |
| Email content on Canadian servers | Yes (servers in Canada, per Hushmail) | No (US/global data centers) | No (email routed through Gmail’s servers) |
| Compliance infrastructure in Canada | Yes | No | Depends on provider (Curio: yes, Montreal) |
| Safeguards you can evidence | Message encryption and a signed IMA | Only the TLS the recipient’s server happens to support; no per message record | Depends on provider (Curio: TLS required on every send, a per send audit trail, and a withdrawn consent directive denied) |
| Email migration required | Only for a full switch | N/A | No |
| Google Calendar/Drive/Meet integration | No | Yes | Yes |
| Learning curve | New interface, new workflow | None | Minimal (runs in background) |
| Encrypted forms | Yes (built in) | No | Varies by provider |
| Audit trail | Yes (built in archive) | Admin audit logs and email log search on all Business plans (the investigation tool needs Enterprise), but these track account and admin activity rather than a per message compliance audit trail | Depends on provider (Curio: yes, Canadian hosted) |
What Hushmail gets right
Hushmail has been doing encrypted email for healthcare for many years. That long track record of handling sensitive health information for practitioners earns credit where it’s due.
Hushmail says its servers are in Canada, so email content stored with Hushmail stays in Canada. For therapists whose risk assessment or college requirements prioritize Canadian data residency for the email itself (not just the compliance infrastructure), this matters.
They provide a signed Information Manager Agreement (IMA) that spells out their obligations for handling your client data. Hushmail built the IMA for Canadian practitioners specifically.
Their encrypted web forms are genuinely useful. Intake forms, questionnaires, consent documents: all handled through the same encrypted channel as your email. For a solo practitioner who doesn’t want to bolt together four different tools, that’s a real selling point.
And the product works. You switch on encryption for the message and send it. The recipient opens it on Hushmail’s secure web page after signing in. It does what it says. Hushmail has been through regulatory scrutiny and has a track record that newer products haven’t built yet.
Pricing
Hushmail prices its healthcare plans per mailbox, with separate tiers for solo practitioners, added admin accounts, and group practices. The figures change, so check Hushmail’s current pricing before budgeting.
For context, Hushmail’s plans sit a few dollars above a Google Workspace Business Starter subscription, which Google publishes at US$7.00 per user per month on the annual plan (Google lists Workspace pricing in USD for Canadian customers, so the CAD cost is higher and shifts with the exchange rate). On a full switch you lose the Google ecosystem, but you get purpose built encrypted email with Canadian data residency baked in.
Where Hushmail falls short for some therapists
The core tradeoff: Hushmail takes your secure mail out of Gmail.
Hushmail’s own FAQ describes two setups. You can switch your whole practice to Hushmail’s inbox, or keep Gmail and use Hushmail only when you need to send something securely. Either way, secure messages go through a separate Hushmail inbox, not through Gmail. That sounds minor on paper. It’s not, if your practice runs on Google Workspace. Here’s what each setup means:
- Full switch: your mailbox moves to Hushmail. An address on your own domain can move with you; a gmail.com address cannot, so you take a new address and tell every client. Google Calendar, Google Drive, and Google Meet stop being integrated with your email
- Keep Gmail: nothing moves, but secure messages are written and sent in Hushmail, a second place to work, and clients read them on Hushmail’s secure web page after signing in
- Either way: a new interface to learn, a new mobile app to configure, and new habits to build
For therapists who only use email and nothing else from Google, migration is straightforward. For therapists whose entire practice management runs through Google Workspace, the switching cost is high. If a full switch changes your address, your clients also need to update it in their contacts, and some will keep emailing the old one.
Compliance content gaps
There’s another gap. Hushmail’s Canada page names PIPEDA (the federal law) and no provincial statute, and its pricing page lists PHIPA and HIA in a compliance table. Neither walks through PHIPA s.12(1) obligations in Ontario, Alberta PIPA s.34 in Alberta, or BC PIPA s.34 in BC.
This doesn’t mean Hushmail fails to meet those requirements. Their encryption is likely a reasonable safeguard under each province’s duty. But if you’re looking for guidance on how the product maps to your specific provincial law, you’ll need to do that analysis yourself. And if your college asks you to show how your setup answers a specific section of PHIPA or Alberta PIPA, you’ll build that mapping from the statute, not from Hushmail’s marketing materials.
Nor does Hushmail publish a mapping to College of Registered Psychotherapists of Ontario (CRPO) Standard 3.4, so an Ontario psychotherapist working through CRPO’s electronic practice standards would build that mapping themselves.
Gmail without encryption: the compliance gap
If you’re using Gmail right now and sending client emails without an encryption layer, there’s a gap.
Gmail’s default TLS encryption only works when the receiving server also supports TLS. If the recipient’s email provider doesn’t, the message transmits in plaintext. Under PHIPA s.12(1) (steps that are reasonable in the circumstances) and Alberta and BC PIPA s.34 (reasonable security arrangements), a message that can fall back to plaintext is hard to defend as a reasonable safeguard for client health information.
Beyond the encryption gap: no Canadian audit trail, no encrypted portal fallback for recipients on servers that don’t support TLS, and no formal documentation that proves you took reasonable steps to protect the email.
The evidence gap
That last point is the one therapists overlook. Encrypting the message is the practical safeguard for email under PHIPA s.12(1). Being able to show you had a system in place matters just as much. Default Gmail gives you no evidence of what protections were applied to a specific email on a specific date. If the Information and Privacy Commissioner of Ontario (IPC) comes asking, “what safeguards were in place when you sent this email on March 15?” you have no answer.
We covered this in full in our guide, is Gmail PHIPA compliant. The short version: Gmail is a good email product. It’s not configured for Canadian health privacy law out of the box.
Gmail with encryption: the third option
There’s a middle path: keep Gmail and add an encryption layer on top of it. The idea: keep your existing Google Workspace setup and hold the email part of it to Canadian health privacy law.
Curio is one product that does this. Here’s what it does today, stated without overclaiming.
Curio encrypts every outbound email automatically. Every message relays with TLS required. If the recipient’s server accepts an encrypted connection, the message arrives as an ordinary email, encrypted in transit. If it does not, delivery bounces and the recipient gets a link to a secure portal, where the message is held encrypted in Montreal. Every send is logged in a Canadian audit trail hosted on GCP in Montreal.
No migration. No new email address. No loss of Google Calendar, Drive, or Meet integration. Your Gmail stays the same. The encryption runs in the background.
From a workflow perspective, you compose an email in Gmail exactly like you always have. Curio applies encryption to every send automatically and logs it in the audit trail, so the record of each send exists without a manual step.
Honest limitations
Email content still sits on Google’s servers outside Canada. Gmail routes messages through Google’s infrastructure, which includes data centers outside Canada. Curio stores your audit trail and encrypted portal messages in Montreal, and the gateway that checks each send runs there too. When your client opens the portal, Cloudflare decrypts the request at the edge nearest them, which may be outside Canada. But the email content itself passes through Gmail before Curio processes it. If your risk assessment requires email content to stay on Canadian servers end to end, this is a gap that Hushmail doesn’t have.
No consent management. Curio encrypts and logs. It doesn’t collect or manage consent. It enforces one thing at send time: a withdrawn consent directive is denied, not downgraded. Consent documentation stays with you.
No lock box directive support. PHIPA’s lock box provisions (allowing clients to restrict which providers in their circle of care can see specific records) aren’t supported.
Those are real limitations. For therapists evaluating encryption options, they matter. We include them here because a comparison that hides the downsides of its own product isn’t a comparison. It’s an ad.
How to decide
There’s no universal right answer here. The best choice depends on what your practice looks like today.
If you don’t use Google Workspace, Hushmail is worth evaluating. You’re not giving up an integrated ecosystem. You get Canadian data residency for email content, built in encrypted forms, and an IMA out of the box. The migration cost is low because there’s no ecosystem to leave behind.
If you use Google Workspace and want to keep it, an encryption layer is the compliance path that doesn’t require migration. You keep your calendar, your Drive, your video calls. You add encryption and a Canadian audit trail. The tradeoff is that email content still routes through Google’s servers. If your concern is the safeguards duty under PHIPA or PIPA, this tradeoff may be acceptable; document why. For therapists whose risk assessment demands full Canadian data residency for email content, it’s not.
If Canadian data residency for email content is a hard requirement (based on your own risk assessment, your college’s guidance, or your Privacy Impact Assessment), Hushmail has the edge today. Curio’s compliance infrastructure is Canadian hosted, but the email content itself passes through Gmail. Today, there’s no way around this for Gmail based solutions.
Other factors
If you need encrypted forms alongside encrypted email, Hushmail bundles this. With Gmail plus an encryption layer, you’d need a separate forms solution. Whether that matters depends on how you handle intake. If you already use a dedicated forms tool (or your practice management software handles intake), the bundled forms aren’t a differentiator.
If price is the deciding factor, a single Hushmail healthcare plan can replace Gmail entirely, if you take the full switch. Gmail with an encryption layer means paying for Google Workspace plus the encryption layer, which costs more in total. But the “cost” of migration (time, client disruption, lost integrations) isn’t on the invoice. Factor both.
If you practice across provinces, review the email privacy laws by province guide. The safeguards duties are worded differently in PHIPA and the two PIPAs, and the consent and breach notification frameworks differ. Your email solution needs to work within whichever province’s law is most restrictive for your situation.
Document your decision
Whatever you choose, document the decision. Write down what you evaluated, why you chose the option you did, and what residual risks you accepted. This isn’t busywork. If your college or the IPC ever audits your privacy practices, a documented decision shows you made a considered choice rather than a default one.
A one page memo to yourself is enough. “I evaluated Hushmail and Gmail with encryption. I chose [X] because [Y]. The residual risk I accepted is [Z].” Date it, file it with your practice policies. Done.
Pan-Canadian note
This comparison focuses on what Hushmail vs Gmail means for therapists across Canada, but the provincial details matter. Whichever option you choose, your obligations vary by province of registration.
Ontario therapists: PHIPA s.12(1) requires reasonable safeguards for personal health information. CRPO Standard 3.4 adds electronic practice requirements. See the full PHIPA email requirements breakdown.
Alberta therapists: Alberta PIPA s.34 requires reasonable security arrangements, with CAP or ACSW standards on top. HIA s.60 and the s.64 privacy impact assessment duty bind custodians and reach a therapist only as an affiliate or under an information manager agreement. See our guide to Alberta PIPA, and who HIA covers.
BC therapists: PIPA s.34 requires reasonable security arrangements. Breach notification under BC PIPA is voluntary for private sector organizations, though the Office of the Information and Privacy Commissioner for BC (OIPC BC) recommends notifying when a breach creates a real risk of significant harm. The mandatory notification regime for significant harm applies to public bodies under FOIPPA s.36.3, not to private practices. Psychotherapy regulation through the College of Health and Care Professionals of BC (CHCPBC) begins November 29, 2027, which will add another layer of obligations. See the BC PIPA email privacy guide.
We’ve also compared Google Workspace, Microsoft 365, and ProtonMail for therapists.
The bottom line
Hushmail is a solid product with real strengths: Canadian servers, built in encrypted forms, a signed IMA, and a long track record in healthcare email. If you’re not tied to Google Workspace, it deserves serious consideration.
But if your practice runs on Gmail, Calendar, Drive, and Meet, switching means more than changing your email. It means rebuilding workflows and losing the integrations you rely on daily.
Adding an encryption layer to Gmail is the third option. It’s not perfect either. Email content still sits on Google’s servers outside Canada, and Curio doesn’t collect or manage consent. But it gets your Gmail encrypted and audited in Canada without asking you to start over.
Both approaches involve tradeoffs. The question is which tradeoffs matter more for your practice, your province, and your risk tolerance.
Pick the option that fits what your practice actually looks like today. Not the one that looks best on a feature comparison chart. Not the one another therapist recommended in a Facebook group. The one that matches your workflow, your province, and your risk assessment.
Key takeaways
- Hushmail says it keeps email content in Canada, and it offers built in encrypted forms and a signed IMA, but its secure messages go through a separate Hushmail inbox, not Gmail
- With Hushmail, your client reads secure messages on Hushmail’s secure web page after signing in. With Gmail and Curio, your client gets an ordinary email when their mail server accepts an encrypted connection. When it doesn’t, the message waits for them on an encrypted portal
- Default Gmail is hard to defend under PHIPA or PIPA safeguards duties for therapist email
- Adding an encryption layer to Gmail keeps your Google Workspace workflow intact while adding encryption and a Canadian audit trail
- Curio’s current limitations include email content stored on Google’s servers outside Canada, no consent management, and no lock box directive support
- Document whichever decision you make, including the tradeoffs you accepted
Curio holds every client email to Canadian mental health privacy law and keeps the record that it did. No migration. No new tools. Start now.
Curio holds every client email to Canadian mental health privacy law and keeps the record that it did. It is not a substitute for professional legal or compliance advice. Consult a qualified privacy professional for your specific situation.
This content is for informational purposes only and does not constitute legal advice. Privacy regulations vary by province and are subject to change. Verify current requirements with your provincial regulatory body.
Now available
Your Gmail. Secure for Canadian mental health privacy law.
