Headspace · Headspace Privacy Policy · View original document ↗

Consumer Health Data Privacy Policy

High severity Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Headspace Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

For users in states with consumer health data laws (like Washington's My Health MY Data Act), Headspace has a separate Consumer Health Data Privacy Policy that provides additional protections for your health-related personal information beyond what standard privacy laws require.

This analysis describes what Headspace's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

State consumer health data laws give you stronger rights over sensitive health information collected outside traditional medical settings — including wellness apps — so this provision expands your protections significantly.

Consumer impact (what this means for users)

Headspace collects highly sensitive personal data including mental health information, therapy session details, and behavioral data from your use of their app, and may share this with advertising partners and third-party service providers. Users in therapy or psychiatry programs are subject to HIPAA protections, but general app users should be aware their meditation habits and wellness data may be used for targeted advertising. You can request deletion of your personal data or opt out of certain data sharing by visiting Headspace's privacy rights portal or emailing privacy@headspace.com.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Email privacy@headspace.com to request deletion of your consumer health data or to withdraw consent for its collection and use, referencing the Consumer Health Data Privacy Policy and your state of residence.

Cross-platform context

See how other platforms handle Consumer Health Data Privacy Policy and similar clauses.

Compare across platforms →

Monitoring

Headspace has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

Compliance with Washington's My Health MY Data Act (MHMDA) and analogous state laws requires Headspace to obtain consent for collection of consumer health data, provide deletion rights, and restrict sharing without authorization — obligations that extend beyond HIPAA to app-based wellness data, creating meaningful compliance risk for any entity offering digital mental health services.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • State AG
    State Attorneys General (particularly Washington State) have enforcement authority over consumer health data privacy laws like the My Health MY Data Act.
    File a complaint →
  • FTC
    The FTC has authority over unfair or deceptive practices relating to health data privacy and has issued guidance on the use of sensitive health data in digital health services.
    File a complaint →

Provision details

Document information
Document
Headspace Privacy Policy
Entity
Headspace
Document last updated
May 5, 2026
Tracking information
First tracked
March 20, 2026
Last verified
March 20, 2026
Record ID
CA-P-00216001
Document ID
CA-D-00216
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
b9e0294d40852fc7d7af732cb3ab491f009220676b6a23629173a3df43ff287d
Analysis generated
March 20, 2026 05:35 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Headspace
Document: Headspace Privacy Policy
Record ID: CA-P-00216001
Captured: 2026-03-20 05:35:30 UTC
SHA-256: b9e0294d40852fc7…
URL: https://conductatlas.com/platform/headspace/headspace-privacy-policy/consumer-health-data-privacy-policy/
Accessed: June 10, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Headspace's Consumer Health Data Privacy Policy clause do?

State consumer health data laws give you stronger rights over sensitive health information collected outside traditional medical settings — including wellness apps — so this provision expands your protections significantly.

Is ConductAtlas affiliated with Headspace?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Headspace.