Most users will not understand that their therapy session data has HIPAA protections but their meditation and mood data on the same app does not — this creates a significant risk that users believe all their health data is protected when it is not.
Headspace collects highly sensitive personal data including mental health history, therapy session details, meditation habits, and inferred emotional states, and shares this data with third-party advertising and analytics partners. Users in therapy or using psychiatry services face additional risk as HIPAA-protected data exists alongside non-HIPAA data in the same platform ecosystem, creating potential confusion about what protections apply. You can request deletion of your personal data, opt out of data sharing for advertising, or download your data by contacting privacy@headspace.com or through your account settings.