I can't speak for Ohio, but on the broad stroke, insurance companies most always pay for a set number of visits... be it 10, 15, 20... that are unmanaged visits. That means that you are straight away covered without question... with a copay.

If you need to exceed, your clinician will have the option of appeal (several other rules apply, in network, etc) and try and get more visits. Some insurance companies have FIXED numbers and others are like any other service and tend to be flexible.

Your non-therapy mental health stuff will likely not have similar limits... psychiatrists and psychiatric np's are seen as medical speciality visits and are covered under that part of your plan.

Also, to further complicate stuff, group therapy might be covered under another facet of your plan, depending upon specifics.

About info, therapists are people and some have loose lips. However, all who accept Fed monies are required to abide by privacy laws. Almost all agree to abide by the same laws even if they are entirely private pay. Most state's licensing laws require that privacy statements be submitted for approval before a license is granted... so they are usually reviewed (@ least they are here)

Your medical records are supposed to remain confidential to the treating clinician. However, it's possible your case will be staffed with other therapists/doctors for suggestions. It is possible that it could be reviewed by auditors if the site comes under review (and all accepting Fed money do at some point). If you are ever involved in criminal proceedings, your records can be pulled and called into the record of the court (it's up to your therapist what to share and a lot of them keep skeleton charts with bare bones info for just such occasions to cover their butt and your's)

There are tons of consequences in place to make blind mouth-running a bad idea.

Hope you are feeling better soon