A physiotherapist's board seat, a well-meant phone call, and a leak

The situation

The email arrived on a Tuesday morning, forwarded to Lucia by a colleague who thought she should see it. It was from a rival clinic operator, congratulating a mutual contact on hearing that Lucia's company was 'finally moving on the Barrie location,' with two details about the site and the financing structure that had only ever been discussed in a closed board session eleven days earlier. Lucia read it twice before she understood what she was looking at. Someone in the room had talked.

The company was a family-owned group of physiotherapy and chiropractic clinics based in Innisfil, built by Lucia over fifteen years and now generating revenue in the higher end of the small-to-mid-market range, roughly eight million dollars a year across four locations. The board was small and informal by design: Lucia as majority owner and chair, her sister Gabriela, a chiropractor who held a minority stake and ran clinical operations, and Deniz, a longtime family friend and physiotherapist who had joined the board two years earlier when the company needed a third voice with industry experience. The three of them had voted, ten days before the email surfaced, to move forward with confidential negotiations on a fifth location, contingent on financing terms nobody outside the room was supposed to know yet.

The leaked details were specific enough that guesswork was not going to solve it. Someone had described the site and, more damagingly, the rough shape of the financing the company was pursuing, information a competitor could use to either bid up the same property or undercut the company's pitch to its own lender. Lucia's first instinct was to assume an employee had overheard something. Her second, more painful instinct, arrived once she thought about who actually knew the financing terms in that level of detail: only the three people who had been in the room.

What made this hard was not the legal question, which was straightforward enough once the facts were established. It was that the three people in the room were family and a close friend, and the conversation that had to happen next risked doing more damage to the company than the leak itself had, if it was handled the wrong way.

Why this was harder than it looked

Directors of a private Ontario company owe the company duties that include acting honestly, in good faith, and in the company's best interests, and a settled part of that duty is protecting information the board treats as confidential. That much was not in dispute once the facts came out. What made the situation genuinely difficult was establishing the facts without accusing anyone before the company actually knew what had happened, and then handling the answer once it arrived.

The answer, when it came, was almost worse for being understandable. Deniz had mentioned the Barrie expansion, in general terms she thought were harmless, to her sister's husband, a business consultant, while asking his opinion on whether the company was overextending itself financially. She had not thought of it as a board leak. She had thought of it as asking someone she trusted for a second opinion on a decision that worried her. The consultant, it turned out, did occasional advisory work for the rival clinic operator, and the specifics had traveled from there without Deniz ever intending them to.

This is where the situation stopped being a simple confidentiality breach and became something that needed careful handling. Deniz had not acted with any bad intent, and treating her the way the company would treat a director who deliberately sold information to a competitor would have been both legally disproportionate and personally devastating to a decade of family friendship. But the company still had real exposure: a competitor now had information that could affect the price and terms of a deal the company had not yet closed, and the board's practice of discussing sensitive financials without any formal confidentiality protocol had made this kind of leak close to inevitable sooner or later.

Gabriela's reaction added its own complication. She was furious with Deniz, felt the friendship-based trust that had gotten Deniz onto the board in the first place had been badly misplaced, and wanted her removed immediately. As a legal matter, though, a director of an Ontario corporation is not removed by the other directors voting her off; it takes an ordinary resolution of the shareholders, which meant the decision sat with Lucia, as majority owner, far more than with Gabriela's anger, however justified that anger felt in the moment. Lucia, caught between her sister's anger and her own long friendship with Deniz, needed a way forward that addressed the legal and financial exposure honestly without letting a family argument dictate a decision the board would regret.

What we did

1. Established the facts before any confrontation happened. We advised Lucia to hold off on any conversation with Deniz or Gabriela until the company had a clear, defensible account of what information had leaked and through what channel, since accusing a director prematurely, and being wrong about the details, would have made an already fragile situation considerably worse. That also meant ruling out other possible sources, employees, advisors, even the company's own bank contacts, before narrowing the inquiry to the three directors who had actually been in the room.
2. Reviewed the company's existing governance documents for what obligations actually applied. The company had a basic shareholders' agreement but no separate confidentiality policy for the board, so we confirmed what duties Deniz owed as a director under general corporate law principles rather than relying on a document that did not address this directly. A shareholders' agreement can narrow or expand a director's default duties, so absent a board-specific clause, her conduct had to be measured against the general fiduciary standard instead.
3. Met with Lucia alone to separate the business decision from the family relationship. Before anyone spoke to Deniz, we walked through what outcomes were actually available, ranging from a formal reprimand to removal from the board, and what each would mean for the pending expansion deal, so Lucia could think clearly about the company's interests before the emotional conversation started.
4. Recommended individual conversations before any joint board meeting. With Gabriela already angry and Deniz not yet aware the leak had been traced to her, we advised against putting all three directors in a room together as a first step, since a confrontation without preparation was likely to produce a rupture the company could not easily undo. Sequencing mattered as much as substance: whoever heard the news first, and how, would shape whether the conversation that followed was a fact-finding exercise or an accusation dressed up as one.
5. Advised on how to raise the issue with Deniz directly and without accusation. We helped Lucia frame the conversation around what had happened and its consequences for the company, rather than around blame, which gave Deniz room to explain the context honestly instead of becoming defensive, and produced a fuller, more useful account of exactly what had been said and to whom.
6. Contacted the lender directly to manage the financing exposure. Once we understood what the competitor now knew, we worked with Lucia to get ahead of the risk by speaking to the company's lender before any competing bid could complicate the terms, which limited the practical damage the leak could do to the deal itself. Framing that conversation honestly with the lender, rather than pretending nothing had changed, also protected the company's credibility with an institution it would need to keep dealing with well beyond this single transaction.
7. Drafted a formal confidentiality protocol for the board going forward. Rather than leave the next sensitive discussion exposed to the same informal risk, we put in place a written policy requiring board materials to be marked confidential, restricting external discussion of pending transactions, and setting out consequences for future breaches, so the fix addressed the structural gap and not just this one incident.
8. Facilitated a joint board session to formally close the matter. Once the individual conversations had lowered the temperature, we brought the three directors together to adopt the new protocol and record how the matter had been resolved, giving the company a documented resolution rather than an unspoken tension that would resurface at the next disagreement. The session also gave Gabriela and Deniz a structured, lower-stakes setting to be in the same room again, with a concrete task in front of them rather than an open-ended reckoning.

The outcome

The expansion deal closed, but not on the terms the company had originally been pursuing. Getting ahead of the lender conversation limited the damage, but the company still ended up negotiating the Barrie property against a competitor who now knew roughly what it was willing to pay, and the final purchase price landed noticeably higher than the board's original target, a cost Lucia attributed directly to the leak once the numbers were compared afterward. That was the loss the company absorbed, and it was real.

Deniz remained on the board. She accepted a period of reduced involvement in financially sensitive discussions while the new confidentiality protocol bedded in, a compromise Lucia and Gabriela agreed to after several difficult conversations, and she has not been the source of any further leak in the time since. The friendship between Lucia and Deniz survived, strained but intact, in large part because the company handled the situation as a governance failure to fix rather than a betrayal to punish, which is not always the outcome a family business manages to reach when trust has been broken.

Gabriela's relationship with Deniz took longer to repair and, by Lucia's account, has not fully returned to where it was before. The two still work together on the board without visible friction, but Gabriela has said plainly that she watches financial conversations more carefully now, and that the ease she once felt around Deniz's involvement in sensitive decisions has not fully come back.

The company came out of the episode with something it had never had before: a real confidentiality policy, and a board that now treats sensitive financial discussions as information that stays in the room, not because anyone doubts each other's intentions, but because the company learned, at real cost, what happens when that assumption is the only safeguard in place. Lucia has since applied the same protocol to a second expansion discussion, this time without incident, and credits the earlier episode, uncomfortable as it was, with teaching the board a lesson that a policy document alone would not have taught them as effectively.

What you can learn from this