When you use Headspace's therapy or psychiatry services, your clinical health information is protected by HIPAA, and Headspace itself is bound by HIPAA rules as a business associate of the treating providers.
This analysis describes what Headspace's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
HIPAA provides meaningful federal protections for clinical health data, including restrictions on how it can be used and shared, and gives patients specific rights including access, amendment, and accounting of disclosures that go beyond general privacy law.
Severity downgraded from high to medium and provision expanded with detailed HIPAA coverage explanation and reference to additional Care Provider privacy notices.
View full change record →Users who receive therapy, psychiatry, or clinical coaching through Headspace have their clinical health records protected under HIPAA, which restricts sharing with third parties including advertisers and provides rights to access and correct those records; however, this protection applies specifically to clinical service data and not to general wellness or behavioral data collected through other Headspace features.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"Our Services are delivered by our Care Providers. For Care Providers in the US, they are classified as covered entities under the Health Insurance Portability and Accountability Act ("HIPAA"). Headspace is subject to HIPAA as our Care Providers' business associate. Our Care Providers may provide you an additional privacy notice during enrollment which we encourage you to review.Excerpt from Headspace's Privacy Policy
REGULATORY LANDSCAPE: This provision directly implicates HIPAA, enforced by the HHS Office for Civil Rights.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
HIPAA provides meaningful federal protections for clinical health data, including restrictions on how it can be used and shared, and gives patients specific rights including access, amendment, and accounting of disclosures that go beyond general privacy law.
Users who receive therapy, psychiatry, or clinical coaching through Headspace have their clinical health records protected under HIPAA, which restricts sharing with third parties including advertisers and provides rights to access and correct those records; however, this protection applies specifically to clinical service data and not to general wellness or behavioral data collected through other Headspace features.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Headspace.