Researchers from the Mozilla Foundation reviewed the privacy policies of 32 mental health apps ranging from guided meditation to telehealth counseling services and flagged 28 of them as having “privacy is not included.” Additionally, the report sorts apps by “Not scary!” to “Super Scary!” (The rankings are each accompanied by a delightful face emoji displaying the appropriate level of concern.) The team also detailed each app, outlining specific concerns.
The Department of Veterans Affairs’ “PTSD Coach” is the gold standard of the “Not Scary!” camp, as it does not collect any personal data and allows users to opt out of anonymous sharing. The only complaint from the researchers was that the Google Play Store app hadn’t been updated in a while – not a bad review for a VA app!
In contrast, several telehealth apps topped the “Super Creepy” category. The report describes how these apps collect large amounts of sensitive personal information through their intake forms and have “vague and messy” privacy policies riddled with red flags. For example, one policy hadn’t been updated since 2018, and another gave the company — again, a mental health care provider — the right to sell information to advertisers.
*non-lawyer trainee[View source.]