Are Mental Health Apps Private? What Actually Happens to Your Data

Why This Category Is Especially Sensitive

A mental health app often has access to mood logs, journal entries, therapy-style conversations, and health questionnaire answers -- information most people would not want shared casually. Unlike a bank or a hospital, most apps in this category are not bound by strict health-data laws like HIPAA, because they're consumer wellness products rather than licensed medical providers, which leaves more of the privacy protection up to the company's own policies.

A Real Enforcement Case: BetterHelp

In 2023, the U.S. Federal Trade Commission fined BetterHelp $7.8 million and permanently banned the company from sharing users' health information for advertising, after finding it had shared email addresses, IP addresses, and mental health questionnaire answers with Facebook, Snapchat, Pinterest and Criteo -- despite telling users that information would stay private. Refunds to affected customers began in 2024. This wasn't a hypothetical privacy risk; it was an actual, penalized practice.

Independent Research Has Found Similar Patterns Elsewhere

Mozilla's Privacy Not Included research project has repeatedly reviewed mental health and wellness apps and found that many collect more data than necessary and share it more widely than users would expect, with a majority of the apps they've assessed over the years failing to meet basic privacy and security standards.

What to Actually Check Before Signing Up

Look specifically for: whether the privacy policy names third-party advertisers it shares data with, whether you can delete your data and account entirely (not just deactivate), and whether the app requires an account with real identifying information versus allowing more anonymous use. A vague privacy policy that doesn't name specific third parties is itself a signal worth weighing.

A Reasonable Standard

No consumer wellness app is going to match hospital-grade data protection, and that's a reasonable expectation to start from. The more useful question is whether a specific company has been transparent, and whether it has a track record (like BetterHelp's, now under an FTC order) that tells you something concrete rather than just marketing language.