No — confirming that a person is a patient at the clinic is itself a disclosure of protected health information under HIPAA, and routine practice should be to neither confirm nor deny without proper authorization.
Correct. Healthcare licensure is determined by the state where the patient is physically located at the time of the encounter, not by the provider's home state. A PMHNP licensed only in Arizona who provides telehealth services to a patient physically located in California would be practicing without a license in California. The PMHNP must either obtain California licensure, refer the patient to a California-licensed provider, or explore whether any interstate compact or temporary practice provisions apply.