#mentalhealthprivacy — Public Fediverse posts

DATE: June 12, 2026 at 08:00AM
SOURCE: PsiAN Psychotherapy Action Network

TITLE: Headway's Biometric Verification Requirement: What Therapists Need to Know

URL: https://www.psian.org/blog/headway-biometric-verification

In April 2026, Headway sent an email to the therapists and patients on its platform with a new requirement: patients and therapists are required to use facial scan verification, linked to a government-issued photo ID, administered through a third-party technology vendor. There is no opt-out. Comply, or leave the platform.

Headway framed this as a safety measure. The company's email told clients the facial image "is never used for anything but identity verification." Headway has since described the process as equivalent to showing your ID at a doctor's office.

That comparison does not hold. And the consequences of accepting it uncritically are serious for the entire field.

What Headway Actually IsHeadway claims that it is not a clinical provider. It does not diagnose, treat, or provide psychotherapy. It is a billing and referral intermediary, a practice management company that connects patients to therapists, manages insurance credentialing and claims, and takes a portion of each reimbursement. But with more than 70,000 clinicians on its platform delivering therapy services, Headway has raised over $225 million in venture capital funding, reached a $2.3 billion valuation, and has built commercial partnerships with more than 70 insurance plans, including Blue Cross Blue Shield plans and Cigna's Evernorth division.

Those partnerships matter. Companies like Headway, Alma, and Rula are funded by and increasingly intertwined with and directed by the insurance companies that control how and how much clinicians get paid. When a billing platform's financial interests are structurally aligned with the insurance industry, its decisions are not neutral administrative choices. They are commercial decisions with clinical consequences; the benefits go to the platform, while the risks and harms are experienced by the therapists and the therapy-going public

Requiring biometric data collection from patients seeking mental health care is one of those decisions.

The Irreversibility ProblemIdentity verification for fraud prevention is not new in healthcare. Licensed psychotherapists and insurance payers have long used it for specific, regulated purposes, including controlled substance prescribing and insurance eligibility. What is new is a billing intermediary requiring facial geometry scans from every patient and every psychotherapist on its network, without exception, as a condition of continued access to care.

The specific harm here is not hypothetical. Biometric identifiers are permanent. When biometric data is linked to mental health records, diagnoses, medication histories, and session notes, the combination creates a data profile that is genuinely alarming. It cannot be anonymized after the fact. It cannot be revoked. Headway's biometric data policy is publicly available at headway.co/legal/biometric-data-policy.

Headway has contracted with Persona, a venture-backed identity technology company, to provide this biometric verification service. In February 2026, Persona became the subject of controversy after a security researcher discovered publicly exposed code from the company. As that article states, “deeper concerns arise about the source of the data. When users submit their IDs and selfies for verification on popular platforms, the data likely ends up being analyzed and resold for many other purposes.”

Whatever assurances Headway offers about HIPAA-compliant processes, the involvement of a third-party technology vendor means patient biometric data now sits with an entity entirely outside the clinical relationship, one with its own data infrastructure, its own investors, and its own incentives.

Who Bears the Highest RiskNot all patients bear this risk equally. The people most endangered by a biometric record linked to their mental health treatment are the people psychotherapy already struggles hardest to reach and retain.

This policy is especially dangerous for transgender clients, whose biometric identity records may not align with their legal name or gender documentation, creating exposure risks that extend well beyond a data breach. It is also dangerous for undocumented individuals, for survivors of stalking and domestic violence, and for anyone who sought care during a moment of acute vulnerability and trusted that the treatment relationship was a protected space.

Requiring a facial scan as a condition of mental health care does not just create abstract privacy risk. For specific, identifiable populations, it creates concrete, direct harm.

What This Does to The Therapeutic RelationshipEffective psychotherapy requires safety, trust, and the patient's sense that the clinical space is protected from outside intrusion. Often, the creation of a trusting relationship with a therapist is an achievement and key marker of progress.

Patients who are already navigating individual or institutional distrust, who may have spent months building a working alliance with their therapist, are now told: use this technology or lose access to care, resulting in clinical harm that may be hard to rectify.

The Broader PatternHeadway's data practices have already drawn legal scrutiny. The company has faced class-action litigation over allegations that it shared sensitive mental health information with Google without explicit user consent, and collected more personal and health information than necessary to provide its services. That history is relevant context for evaluating the weight of the company's current assurances about biometric data.

Headway's biometric policy is the latest in a series of decisions by venture-backed practice management companies to change their policies that affect clinical territory without consideration or accountability. These platforms have restructured how therapists get paid, imposed session limits tied to insurance protocols, reduced reimbursement rates without clinician input, and now require patients to submit biometric data as a condition of accessing the therapist they chose.

What We Are Doing and What You Can DoPsychotherapy Action Network is tracking this issue and will continue to speak publicly as it develops. We are watching for regulatory and legislative responses, monitoring the actions of other practice management companies, and documenting how policies like this affect psychotherapists and patients and access to care.

If you are a clinician currently using Headway or a similar platform, we encourage you to review the terms of your provider agreement, understand what biometric data you and your patients are being asked to provide, and consider what your ethical obligations are in the context of informed consent. Talk to your patients. Make sure they understand what they are agreeing to. Assess the risks and benefits of continuing to do business with Headway, for your patients and your practice.

Business decisions for clinical practice are often clinical decisions. This one should belong to clinicians and patients, not to a practice management platform. Define clearly for yourself what your professional values and ethics are, and use those as a guide in navigating issues like this one.

Read Our Research on Practice Management Companies

Read Our Guide for Evaluating Practice Management Companies

Check Out the Private Practice Hub

Stand with us by becoming a sustaining member today.

URL: https://www.psian.org/blog/headway-biometric-verification

-------------------------------------------------

The Psychotherapy Action Network (PsiAN) advocates for awareness, policies and access to psychotherapies that create meaningful change. They offer membership and educational events.

Learn more at https://www.psian.org .

The PsiAN blog can be found at: https://www.psian.org/blog

This news robot is NOT officially affiliated with PsiAN. It merely rebroadcasts from their blog. Responses posted here are not monitored by PsiAN.

-------------------------------------------------

#psychology #counseling #socialwork #psychotherapy @psychotherapist @psychotherapists @psychology @socialpsych @socialwork @psychiatry #mentalhealth #psychiatry #healthcare #PsiAN #psychotherapist #psychoanalytic #psychodynamic #depththerapy #HeadwaysBiometricVerification #TherapistSafety #MentalHealthPrivacy #BiometricDataPolicy #IdentityVerificationInHealthcare #TherapyAccessRights #TransgenderPrivacy #UndocumentedCare #PracticeManagementCompanies #PsychotherapyEthics

DATE: June 12, 2026 at 08:00AM
SOURCE: PsiAN Psychotherapy Action Network

TITLE: Headway's Biometric Verification Requirement: What Therapists Need to Know

URL: https://www.psian.org/blog/headway-biometric-verification

In April 2026, Headway sent an email to the therapists and patients on its platform with a new requirement: patients and therapists are required to use facial scan verification, linked to a government-issued photo ID, administered through a third-party technology vendor. There is no opt-out. Comply, or leave the platform.

Headway framed this as a safety measure. The company's email told clients the facial image "is never used for anything but identity verification." Headway has since described the process as equivalent to showing your ID at a doctor's office.

That comparison does not hold. And the consequences of accepting it uncritically are serious for the entire field.

What Headway Actually IsHeadway claims that it is not a clinical provider. It does not diagnose, treat, or provide psychotherapy. It is a billing and referral intermediary, a practice management company that connects patients to therapists, manages insurance credentialing and claims, and takes a portion of each reimbursement. But with more than 70,000 clinicians on its platform delivering therapy services, Headway has raised over $225 million in venture capital funding, reached a $2.3 billion valuation, and has built commercial partnerships with more than 70 insurance plans, including Blue Cross Blue Shield plans and Cigna's Evernorth division.

Those partnerships matter. Companies like Headway, Alma, and Rula are funded by and increasingly intertwined with and directed by the insurance companies that control how and how much clinicians get paid. When a billing platform's financial interests are structurally aligned with the insurance industry, its decisions are not neutral administrative choices. They are commercial decisions with clinical consequences; the benefits go to the platform, while the risks and harms are experienced by the therapists and the therapy-going public

Requiring biometric data collection from patients seeking mental health care is one of those decisions.

The Irreversibility ProblemIdentity verification for fraud prevention is not new in healthcare. Licensed psychotherapists and insurance payers have long used it for specific, regulated purposes, including controlled substance prescribing and insurance eligibility. What is new is a billing intermediary requiring facial geometry scans from every patient and every psychotherapist on its network, without exception, as a condition of continued access to care.

The specific harm here is not hypothetical. Biometric identifiers are permanent. When biometric data is linked to mental health records, diagnoses, medication histories, and session notes, the combination creates a data profile that is genuinely alarming. It cannot be anonymized after the fact. It cannot be revoked. Headway's biometric data policy is publicly available at headway.co/legal/biometric-data-policy.

Headway has contracted with Persona, a venture-backed identity technology company, to provide this biometric verification service. In February 2026, Persona became the subject of controversy after a security researcher discovered publicly exposed code from the company. As that article states, “deeper concerns arise about the source of the data. When users submit their IDs and selfies for verification on popular platforms, the data likely ends up being analyzed and resold for many other purposes.”

Whatever assurances Headway offers about HIPAA-compliant processes, the involvement of a third-party technology vendor means patient biometric data now sits with an entity entirely outside the clinical relationship, one with its own data infrastructure, its own investors, and its own incentives.

Who Bears the Highest RiskNot all patients bear this risk equally. The people most endangered by a biometric record linked to their mental health treatment are the people psychotherapy already struggles hardest to reach and retain.

This policy is especially dangerous for transgender clients, whose biometric identity records may not align with their legal name or gender documentation, creating exposure risks that extend well beyond a data breach. It is also dangerous for undocumented individuals, for survivors of stalking and domestic violence, and for anyone who sought care during a moment of acute vulnerability and trusted that the treatment relationship was a protected space.

Requiring a facial scan as a condition of mental health care does not just create abstract privacy risk. For specific, identifiable populations, it creates concrete, direct harm.

What This Does to The Therapeutic RelationshipEffective psychotherapy requires safety, trust, and the patient's sense that the clinical space is protected from outside intrusion. Often, the creation of a trusting relationship with a therapist is an achievement and key marker of progress.

Patients who are already navigating individual or institutional distrust, who may have spent months building a working alliance with their therapist, are now told: use this technology or lose access to care, resulting in clinical harm that may be hard to rectify.

The Broader PatternHeadway's data practices have already drawn legal scrutiny. The company has faced class-action litigation over allegations that it shared sensitive mental health information with Google without explicit user consent, and collected more personal and health information than necessary to provide its services. That history is relevant context for evaluating the weight of the company's current assurances about biometric data.

Headway's biometric policy is the latest in a series of decisions by venture-backed practice management companies to change their policies that affect clinical territory without consideration or accountability. These platforms have restructured how therapists get paid, imposed session limits tied to insurance protocols, reduced reimbursement rates without clinician input, and now require patients to submit biometric data as a condition of accessing the therapist they chose.

What We Are Doing and What You Can DoPsychotherapy Action Network is tracking this issue and will continue to speak publicly as it develops. We are watching for regulatory and legislative responses, monitoring the actions of other practice management companies, and documenting how policies like this affect psychotherapists and patients and access to care.

If you are a clinician currently using Headway or a similar platform, we encourage you to review the terms of your provider agreement, understand what biometric data you and your patients are being asked to provide, and consider what your ethical obligations are in the context of informed consent. Talk to your patients. Make sure they understand what they are agreeing to. Assess the risks and benefits of continuing to do business with Headway, for your patients and your practice.

Business decisions for clinical practice are often clinical decisions. This one should belong to clinicians and patients, not to a practice management platform. Define clearly for yourself what your professional values and ethics are, and use those as a guide in navigating issues like this one.

Read Our Research on Practice Management Companies

Read Our Guide for Evaluating Practice Management Companies

Check Out the Private Practice Hub

Stand with us by becoming a sustaining member today.

URL: https://www.psian.org/blog/headway-biometric-verification

-------------------------------------------------

The Psychotherapy Action Network (PsiAN) advocates for awareness, policies and access to psychotherapies that create meaningful change. They offer membership and educational events.

Learn more at https://www.psian.org .

The PsiAN blog can be found at: https://www.psian.org/blog

This news robot is NOT officially affiliated with PsiAN. It merely rebroadcasts from their blog. Responses posted here are not monitored by PsiAN.

-------------------------------------------------

#psychology #counseling #socialwork #psychotherapy @psychotherapist @psychotherapists @psychology @socialpsych @socialwork @psychiatry #mentalhealth #psychiatry #healthcare #PsiAN #psychotherapist #psychoanalytic #psychodynamic #depththerapy #HeadwaysBiometricVerification #TherapistSafety #MentalHealthPrivacy #BiometricDataPolicy #IdentityVerificationInHealthcare #TherapyAccessRights #TransgenderPrivacy #UndocumentedCare #PracticeManagementCompanies #PsychotherapyEthics