Elizabeth Warren
06/23/2022 | Press release | Distributed by Public on 06/23/2022 10:14
Warren, Booker, Wyden Call on Mental Health Apps to Provide Answers on Data Privacy and Sharing Practices that May Put Patients’ Data at Risk of Exploitation
June 23, 2022
Warren, Booker, Wyden Call on Mental Health Apps to Provide Answers on Data Privacy and Sharing Practices that May Put Patients' Data at Risk of Exploitation
Mental Health Apps Reportedly Collect, Mine, and Disseminate Private Client Information to Big Tech Companies and Data Brokers
Washington, D.C. - U.S. Senators Elizabeth Warren (D-Mass.), Cory Booker (D-N.J.), and Ron Wyden (D-Ore.) sent letters to BetterHelp and Talkspace, two leading mental health apps, expressing deep concerns about the companies' use of patients' personal health data and requesting more information about their data sharing and privacy practices. Their letter follows reports that mental health apps are collecting, mining, and disseminating private client information to third parties, including data brokers and Big Tech companies like Google and Facebook.
"We have long been concerned about the misuse of personal data by Big Tech companies and unscrupulous data brokers, especially for the purpose of microtargeting vulnerable populations. Unfortunately, it appears possible that the policies used by your company and similar mental health platforms allow third-party Big Tech firms and data brokers, who have shown remarkably little interest in protecting vulnerable consumers and users, to access and use highly confidential personal and medical information." said the senators.
Mental health apps, including BetterHelp and Talkspace, exploded in popularity during the COVID-19 pandemic, marketing themselves as a "cost-effective alternative to traditional therapy." However, they appear to be taking advantage of the "regulatory gray area" in the Health Insurance Portability and Accountability Act of 1996 (HIPAA) to exploit their patients' data for profit.
A February 2020 investigation found that BetterHelp was sharing analytics with Facebook about how often users opened the app, and metadata from every message shared on the platform - giving the company information on how long, and where users were using mental health services. Former Talkspace employees claimed that "treatment transcripts (were treated) as another data resource to be mined," and revealed that "individual users' anonymized conversations were routinely reviewed and mined for insights" to help the company with research and marketing tactics.
The senators raise additional concerns about the apps' claims about sharing and using "anonymized" data. Both companies were sharing anonymized information with the research and analytics panel MixPanel, allowing MixPanel to see "where (users) were and what device (users) were using; approximately how old (users) were, whether (users) considered (them)selves spiritual or religious, (their) financial status, and (their) sexual orientation," as well as information about where and when users had used therapy. A 2019 study reported that even anonymized data could be used to identify individuals, finding that with just a zip code, gender, and date of birth, companies could identify an "anonymized" person 81% of the time.
Given these concerns, the senators are calling on BetterHelp and Talkspace to answer a set of questions about the type and breadth of data they share with third parties, including Big Tech companies like Google and Facebook; the methods they use to protect clients' information; and their processes to inform potential clients and current users about their privacy policies and the risks of data sharing by July 6, 2022.
Senator Warren has used oversight and policy tools to protect the sensitive data of American consumers from Big Tech companies and data brokers:
- On June 15, 2022, Senators Warren, Wyden, Patty Murray (D-Wash.), Sheldon Whitehouse (D-R.I), and Bernie Sanders (I-Vt.) introduced the Health and Location Data Protection Act, sweeping legislation that bans data brokers from selling some of the most sensitive data available about everyday Americans: their health and location data.
- On May 18, 2022, Senators Warren, Bill Cassidy, M.D. (R-La.), and Marco Rubio (R-Fla.) introduced the Protecting Military Service Members' Data Act of 2022 to protect the data of U.S. service members by preventing data brokers from selling lists of military personnel to adversarial nations including China, Russia, Iran, and North Korea.
- On May 17, 2022, Senator Warren led thirteen of her Senate colleagues in letters to two data brokers demanding answers regarding their collection and sale of the cellphone-based location data of people who visit abortion clinics such as Planned Parenthood.
###