Is BetterHelp Safe for Online Therapy?
BetterHelp is the largest online therapy platform, but it carries a caution rating following a 2023 FTC enforcement action that found the company shared sensitive mental health data with advertising platforms including Facebook and Snapchat for ad targeting. The FTC ordered BetterHelp to pay 7.8 million dollars and banned it from sharing health data for advertising. BetterHelp is not HIPAA compliant. While therapy sessions are encrypted, the company data practices have demonstrated a willingness to monetize sensitive mental health information. Users seeking online therapy should carefully weigh privacy risks.
What BetterHelp Collects
- Intake questionnaire responses about mental health symptoms and history
- All therapy session communications including messages, video, and audio
- Health assessment data and treatment progress notes
- Billing and insurance information
- Device data, IP addresses, and app usage analytics
Who Sees Your Data
- BetterHelp Inc. and its parent company Teladoc Health
- Your assigned therapist who manages your treatment
- Previously shared with Facebook and Snapchat for ad targeting per FTC findings
- Analytics and advertising partners under current policies
The FTC Enforcement Action
In March 2023, the FTC settled charges against BetterHelp for sharing health data with advertising platforms. The agency found that BetterHelp disclosed sensitive health questionnaire data, email addresses, and IP addresses to companies including Facebook, Snapchat, Criteo, and Pinterest for advertising purposes. This included data revealing that individuals were seeking therapy and their reported mental health conditions. BetterHelp was ordered to pay 7.8 million dollars in refunds and was banned from sharing health data for advertising. This enforcement action remains the most significant documented case of a therapy platform monetizing patient data.
Not HIPAA Compliant
BetterHelp is not classified as a HIPAA-covered entity, which means your therapy data does not receive the federal protections that apply to traditional healthcare providers. BetterHelp operates as a technology platform connecting you with therapists rather than as a healthcare provider itself. This distinction means the company faces different and generally less restrictive regulatory requirements around health data handling. If HIPAA protection for your therapy records is important to you, traditional healthcare providers and HIPAA-compliant telehealth services offer stronger legal protections.
Therapy Session Security
BetterHelp encrypts therapy communications including video sessions, messaging, and audio calls. Your therapist maintains session notes within the platform. The encryption protects against external interception, but BetterHelp itself has access to the communication content on their servers. Given the FTC findings about data sharing practices, the fact that BetterHelp can access your therapy communications is a meaningful concern. The technical security is adequate, but the organizational data handling practices are the primary risk factor.
Recommended Privacy Settings
| Setting | Where | Recommended |
|---|---|---|
| Data Sharing Consent | BetterHelp Account > Privacy Settings | Review and opt out of all optional data sharing and marketing consent |
| Account Deletion | Contact BetterHelp support for account and data deletion | If you stop using BetterHelp, request complete data deletion rather than just canceling your subscription |
| Session Recording | Discuss with your therapist | Confirm whether sessions are recorded and understand the data retention policy for your communications |
Safer Alternatives
HIPAA-covered providers face strict legal requirements around health data protection with real consequences for violations
Competitor platform that has not faced FTC enforcement for advertising data sharing, though review their current privacy practices
Our Verdict
BetterHelp carries a caution rating primarily due to the 2023 FTC enforcement action that documented sharing of mental health data with advertising platforms. The lack of HIPAA compliance means your therapy data has fewer legal protections than with traditional providers. While the FTC order now prohibits advertising data sharing, the historical practices permanently raise trust questions. For online therapy with stronger privacy protections, seek HIPAA-compliant telehealth providers. If you use BetterHelp, opt out of all data sharing and request data deletion when you stop using the service.
Related Safety Checks
Frequently Asked Questions
Did BetterHelp really share therapy data with Facebook?
Yes. The FTC found that BetterHelp shared health questionnaire data, email addresses, and IP addresses with Facebook, Snapchat, Criteo, and Pinterest for advertising targeting. This meant that people who filled out mental health intake forms had that information used to target them with ads. The FTC explicitly found that BetterHelp promises of privacy were deceptive. The company was ordered to stop this practice and pay 7.8 million dollars in consumer refunds.
Is BetterHelp HIPAA compliant?
No. BetterHelp does not operate as a HIPAA-covered entity. The company classifies itself as a technology platform rather than a healthcare provider, which exempts it from HIPAA requirements. This means your therapy communications and health data do not receive the same federal protections as data held by traditional healthcare providers, hospitals, or HIPAA-compliant telehealth services. If HIPAA protection is important to you, seek therapy through a provider that explicitly operates under HIPAA requirements.
Are my BetterHelp therapy sessions private?
Therapy sessions are encrypted during transmission, and your therapist maintains confidentiality as required by their professional licensing. However, BetterHelp as a company has access to session data on their servers, and the FTC enforcement action demonstrated that the company has shared user health data with advertising platforms in the past. While the FTC order now prohibits this specific practice, the historical willingness to share therapy-adjacent data with advertisers is a significant trust concern for a mental health platform.