Talkspace

Talkspace comes with a fair amount of baggage when it comes to protecting and respecting their users' privacy and security. In 2020, the NY Times reported on allegations from former Talkspace employees about questionable marketing practices and questionable handling of private therapy chat logs. The founders of Talkspace disputed some of the claims made in the article. Consumer Reports reported in 2021 that Talkspace does collect data from Facebook for ads, although they said they only use information about a person before they start therapy. There's also this 2019 article from Mashable detailing more questionable marketing practices and CNBC reported in 2020 about privacy, transparency, and oversight concerns for therapy apps like Talkspace. All of this reporting leaves us concerned. And then there is Talkspace's own privacy policy, privacy notice, and additional privacy statements that leave us concerned. And sometimes scratching our head in confusion too.

Talkspace says they can collect a lot of personal information on users, including name, email, address, phone number, gender, relationship status, employer, geolocation information, chat transcripts and more. While Talkspace says in their privacy notice they will not sell your medical information to others, we could find no promise to not sell non-medical information in their privacy policy (except for residents of California and those in Europe and the UK living under GDPR privacy laws). This is something we like to see stated clearly. (Update: On June 14th, 2022, Talkspace updated their privacy policy to state, "Talkspace does not sell client information to third parties.")

They do say they can use your personal information for marketing, tailored advertising, and research purposes. And while your medical information is protected under HIPAA privacy laws -- which is good -- Talkspace also says "your written authorization will be required for uses and disclosures of psychotherapy notes and uses and disclosures of your protected health information for marketing." Which indicates that Talkspace could ask for your permission to use your health info and therapy notes for marketing purposes. Which feels like bad form to us. (Update: On June 14, 2022, Talkspace updated their privacy policy to remove any mention of "psychotherapy notes." They use the term "chat data" to refer to data you provide when you use the service. They say they can use this data "To conduct clinical and other academic research, internally and with approved research partners and identify summary trends or insights for use in external communications (where direct identifiers such as name and contact details have been removed, or pursuant to explicit patient authorization)."

We did reach out multiple times to try to get answers to our privacy and security related questions to the email address Talkspace lists in their privacy policy for privacy related questions. Unfortunately, they never responded to our questions. After we published our review of Talkspace, they did respond to our questions and confirm they take all the security steps necessary to meet our Minimum Security Standards, including a way for people to report security vulnerabilities. However, we did find a report from Techcrunch in 2020 where one security researcher found a bug in Talkspace, tried to report it to them, and in response Talkspace threatened to sue the researcher. Which feels like even more bad form to us.

So when Talkspace says in their privacy policy, "If you do not want us to share personal data or feel uncomfortable with the ways we use information in order to deliver our Services, please do not use the Services," we think that's pretty good advice.