Researchers from the Mozilla Foundation reviewed the privacy policies of 32 mental health apps ranging from guided meditation to telehealth counseling services and flagged 28 of them as having “Privacy Not Included.” In addition, the report sorts the apps from “Not creepy!” to “Super creepy!” (The rankings are each accompanied by a delightful emoji face displaying the appropriate amount of concern.) The team also detailed each app, laying out specific concerns.

The Department of Veteran Affairs’ “PTSD Coach” is the gold standard from the “Not creepy!” camp, as it doesn’t collect any personal data and lets users opt-out of anonymized sharing. The researchers’ only gripe was that the Google Play Store app hadn’t been updated in a while – not a bad review for an app from the V.A.!

On the other hand, several telehealth apps were at the top of the “Super creepy” category. The report describes how these apps collect vast amounts of sensitive personal information through their intake forms and have “vague and messy” privacy policies riddled with red flags. For example, one policy hadn’t been updated since 2018, and another gave the company – again, a mental health care provider – the right to sell information to advertisers.

My personal favorite profile was a popular Bible app developed by a company that the Mozilla team traced back to a mysterious and controversial Chinese mobile game developer. The app inexplicably collects GPS location, and the privacy policy includes this gem instead of opt-out language: “You may decline to submit personal information to any of our services, in which case we may not be able to provide those services to you.” It’s been a tough few years, and you may be looking for new ways to support your mental health. But don’t compromise your data to do it – good privacy habits are self-care too. View the full report here.

*This post was authored by Blair Robinson, legal intern at Robinson+Cole. Blair is not yet admitted to practice law.