Skip to content
SafetyScorer

Is Talkspace safe?

Talkspace

Talkspace is a reasonably safe way to see a licensed therapist online. Records are protected health information under HIPAA and no regulator has fined it, but it shares identifiers and app activity for advertising, analyses therapy chats with machine learning and makes deletion slow.

Medium confidence#37 of 62 in Health, family and learning
Updated
Spot a mistake?

#37of 62 in Health, family and learning

Medium confidence
Agree with our score?
Owner
Universal Health Services (US) since 17 August 2026; shares delisted
HIPAA
Data of US members is protected health information
App Store label
Only purchase history and user ID listed; no tracking declared
Ad sharing
Device and browsing identifiers shared with ad networks and social media; email shared for marketing (Google Play)
Two-factor login
Optional; codes by SMS and email, cannot be turned off once on
Data deletion
Emailed form plus a copy of photo ID; medical records are kept
Regulator actions
None found; no FTC case on record
App Store rating
13+

How the score breaks down

The overall score is the weighted average of these factors. Scoring rules

  • Privacy30% of score

    57 out of 100, Fair

    Apple's label lists only purchases and a user ID, which understates the policy. The July 2025 policy shares device and browsing identifiers with ad networks and social media, and Google Play lists email and app activity as shared for marketing. Machine learning reads therapy chats to give therapists insights and draft notes.

  • Security30% of score

    64 out of 100, Fair

    Talkspace's 2025 annual report lists encryption at rest and in transit, a regular SOC 2 Type II report and third-party penetration tests; its policy adds yearly outside HIPAA control assessments. Two-factor authenticationSigning in with a second proof of identity on top of your password, such as a code from an app, a security key or a passkey.More in the glossary login is optional. No reported breach. There is no bug bounty, and in 2020 it sent a researcher a legal threat over a bug report.

  • Transparency and control15% of score

    55 out of 100, Fair

    Deletion and data copies need an emailed request form plus a copy of your photo ID; there is no delete button in the app. Medical records are kept under healthcare rules even after deletion, and the policy names no retention period. Peer forum posts can be removed by the user.

  • Scams and harmful content15% of score

    74 out of 100, Good

    Therapy is with licensed providers, so scam and harassment risk is low. Teens aged 13 to 17 can sign up with a parent's written authorisation, and the moderated Teenspace forum shows other users a poster's age and state. The App Store rates the app 13+.

  • Regulatory record10% of score

    86 out of 100, Excellent

    We found no FTC case, state attorney general action or other regulator fine naming Talkspace, and its last quarterly filing reported no material pending legal proceedings. Senators' letters and private suits are context only, so the score sits in the band for apps no regulator has examined.

Is Talkspace safe?

Talkspace is a reasonable way to see a licensed therapist online, with clearer legal protection than most mental health apps: what US members tell their therapist is protected health information under HIPAA. No regulator has fined it, unlike BetterHelp, which paid $7.8 million under a 2023 FTC order. The weaker points are elsewhere. Talkspace shares device and browsing identifiers with ad networks, runs machine learning over therapy chats, and makes you email a form with a copy of your photo ID to delete your data. We score it 64/100, level with BetterHelp and behind Headspace at 69.

What Talkspace does with your data

Apple's privacy label for the app is thin: it lists only purchase history and a user ID. The policy and Google Play's data safety section show more. Google Play says Talkspace collects health information, voice recordings, files, photos and, optionally, sexual orientation, and shares your email address and app activity with other companies for advertising or marketing. Because the policy discloses far more than the Apple label, we score privacy on the policy.

The privacy policy, last updated on 17 July 2025, splits data into two worlds. Clinical data of US members is protected health information, covered by HIPAA and Talkspace's notice of privacy practices. Identifiers from cookies, pixels and SDKs, including Google Analytics and Google Ads, are shared with "advertising technology vendors, third-party advertising networks, and social media platforms" for personalised ads. The app's SDKs also process device identifiers and events such as account creation and subscription for ad attribution. Talkspace says pixel use is limited once you become a patient, and that it does not sell client information.

The part that may surprise users is the machine learning. The policy says Talkspace runs natural language processing over your messages with your therapist to give the therapist insights and suggestions, and can generate therapy notes. University research using your health information needs your written authorisation.

Past controversies

In August 2020 The New York Times reported that former employees and therapists said anonymised therapy conversations were routinely reviewed and mined for insights, and two former employees said common phrases from transcripts were shared with the marketing team. Talkspace disputed this and said the data "never has and never will be used for marketing purposes". In 2022 Mozilla named Talkspace among the worst offenders in its review of mental health apps; Talkspace told TechRadar the review contained "major inaccuracies".

In March 2020 TechCrunch reported that Talkspace sent a cease-and-desist letter accusing a security researcher of defamation after he blogged about a sign-up flaw that gave him a free year of service. The company had no way for researchers to report bugs at the time, and we found no bug bounty today.

How secure is Talkspace?

Better than its 2020 episode suggests. Its 2025 annual report lists encryption at rest and in transit, a regular SOC 2 Type II audit report and third-party penetration tests, and its privacy policy says outside assessors check its HIPAA controls every year. Members can turn on Two-factor authenticationSigning in with a second proof of identity on top of your password, such as a code from an app, a security key or a passkey.More in the glossary login, with codes sent by SMS and email; once on, it cannot be switched off. The same report says Talkspace and its vendors have had cybersecurity incidents "from time to time", none of them material, and we found no reported breach of member data. Messages are not End-to-end encryptionEncryption in which only the sender and the recipient can read a message. The company running the service cannot see its content.More in the glossary, so they sit readable on Talkspace's systems.

Who owns Talkspace now?

Universal Health Services, a large US hospital and behavioural health group, completed its takeover on 17 August 2026, and Talkspace left the stock market. Its last quarterly report said it had no material pending legal proceedings. As a private subsidiary it no longer publishes annual risk reports, so less will be visible from now on. Watch for an updated privacy policy under the new owner.

How to use Talkspace more safely

  1. Turn on Two-factor authenticationSigning in with a second proof of identity on top of your password, such as a code from an app, a security key or a passkey.More in the glossary login from the prompt at the top of your room.
  2. Decline advertising cookies on the website before you answer the sign-up questions.
  3. On iPhone, tap "Ask App Not to Track"; on Android, delete your advertising ID in the system ad settings.
  4. In Teenspace or any peer forum, remember that other members see your username, age and state.
  5. To leave, cancel the subscription first, then send the deletion form with your ID to [email protected]. Your clinical record stays, as healthcare law requires.

How we scored it

The regulatory record (86) is the strongest factor: no regulator has fined or ordered Talkspace. Transparency and control (55) is the weakest, because deleting your data takes an emailed form and photo ID and records are kept for an unstated period. Privacy (57) reflects HIPAA protection for therapy data offset by ad sharing of identifiers and machine-learning analysis of chats.

Questions people ask

Is Talkspace HIPAA compliant?

Yes, for US members. Its privacy policy says the personal data it holds about US subscribers is protected health information under HIPAA, and that its HIPAA security controls are assessed by a third party every year. Cookies and ad identifiers from visitors who have not signed up fall under the general privacy policy.

Does Talkspace read my therapy messages?

Your therapist does, and so do Talkspace's systems. The policy says machine learning, including natural language processing of your messages with your therapist, gives therapists insights and can draft therapy notes. Research use of your health information needs your written authorisation.

Does Talkspace sell my data?

Its app policy says it does not sell client information. It does share device and browser identifiers with ad networks and social media platforms for personalised ads, and Google Play says your email and app activity are shared for marketing. The policy says the use of pixels is limited once you become a patient.

How do I delete my Talkspace account?

Fill in Talkspace's data request form, then email it with a copy of your photo ID to [email protected]. If you never had a session, a plain email is enough. Deletion does not cancel your subscription, and your medical records are kept as healthcare law requires.

Can teenagers use Talkspace?

Yes, in the US. Teens aged 13 to 17 need a parent's or guardian's written authorisation, create their own accounts with their own email, and can sign up as a dependent on a parent's health plan or workplace benefit. They can also post in Teenspace, a moderated peer forum where other members see their username, age and state.

Who owns Talkspace now?

Universal Health Services, a US hospital and behavioural health company, bought Talkspace in a merger that closed on 17 August 2026. Talkspace's shares stopped trading and it no longer files reports with the SEC, so it now publishes less about its business and risks.

Sources

  1. 1.Talkspace Privacy Policy (last updated 17 July 2025) (opens in a new tab) · Talkspace, 2025
  2. 2.Talkspace, Inc. Form 8-K (completion of merger with Universal Health Services) (opens in a new tab) · U.S. Securities and Exchange Commission, 2026
  3. 3.Universal Health Services, Inc. Completes Acquisition of Talkspace, Inc. (Form 8-K, Exhibit 99.1) (opens in a new tab) · Universal Health Services / SEC, 2026
  4. 4.Talkspace, Inc. Form 10-K for 2025 (cybersecurity and risk factors) (opens in a new tab) · U.S. Securities and Exchange Commission, 2026
  5. 5.Talkspace, Inc. Form 10-Q for the quarter ended 30 June 2026 (legal proceedings) (opens in a new tab) · U.S. Securities and Exchange Commission, 2026
  6. 6.Talkspace - Virtual Therapy App, App Store listing and App Privacy label (opens in a new tab) · Apple App Store, 2026
  7. 7.Talkspace, Google Play data safety (opens in a new tab) · Google Play, 2026
  8. 8.Managing and Deleting Your Personal Data and Account (opens in a new tab) · Talkspace Help Center, 2026
  9. 9.I'm Having Trouble with Two-Factor Authentication (2FA) (opens in a new tab) · Talkspace Help Center, 2026
  10. 10.Talkspace threatened to sue a security researcher over a bug report (opens in a new tab) · TechCrunch, 2020
  11. 11.At Talkspace, Start-Up Culture Collides With Mental Health Concerns (opens in a new tab) · The New York Times, 2020
  12. 12.Mozilla finds serious security flaws for mental health and prayer apps (opens in a new tab) · TechRadar, 2022
  13. 13.FTC Cases and Proceedings search for "talkspace" (no results) (opens in a new tab) · Federal Trade Commission, 2026
Spot a mistake?