John is a cash$-$only mental health provider, meaning that he solely accepts payment from patients and does not bill insurance companies. Further, his records are all paper based. He keeps a list of his patients on his computer but does not send the list to anyone else. Is this provider a HIPAA$-$covered entity? Why or why not?