Headspace · Headspace Privacy Policy

Data Retention Policy

Medium severity
Share 𝕏 Share in Share

Why it matters

The absence of specific retention periods for sensitive mental health and therapy data means Headspace may retain your most private information indefinitely unless you actively request deletion.

Consumer impact

Headspace collects highly sensitive personal data including mental health history, therapy session details, meditation habits, and inferred emotional states, and shares this data with third-party advertising and analytics partners. Users in therapy or using psychiatry services face additional risk as HIPAA-protected data exists alongside non-HIPAA data in the same platform ecosystem, creating potential confusion about what protections apply. You can request deletion of your personal data, opt out of data sharing for advertising, or download your data by contacting privacy@headspace.com or through your account settings.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Within 30 days
    To request deletion of your personal data, email privacy@headspace.com with your account details and a request for full data deletion. Headspace is required to respond within the timeframes mandated by applicable law (45 days under CPRA, 30 days under GDPR).

Applicable agencies

  • FTC
    The FTC has authority over unfair or deceptive data retention practices under FTC Act Section 5, and has cited excessive data retention as an unfair practice in health data enforcement actions.
    File a complaint →

Provision details

Document information
Document
Headspace Privacy Policy
Entity
Headspace
Document last updated
March 24, 2026
Tracking information
First tracked
April 1, 2026
Last verified
April 1, 2026
Record ID
CA-P-001140
Document ID
CA-D-00216
Evidence Provenance
Source URL
Wayback Machine
SHA-256
48761338090dd38db1c4ff45c1e9b8fb2d0d59e40cac2d4342a4e5d6bebb70c2
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Headspace | Document: Headspace Privacy Policy | Record: CA-P-001140
Captured: 2026-04-01 15:17:25 UTC | SHA-256: 48761338090dd38d…
URL: https://conductatlas.com/platform/headspace/headspace-privacy-policy/data-retention-policy/
Accessed: April 4, 2026
Classification
Severity
Medium
Categories

Other provisions in this document