BetterHelp Safety, Regulation & Compliance Posture: An Independent Review

What BetterHelp Actually Is (And Is Not)

BetterHelp is a subscription-based platform that matches users with licensed mental health professionals for remote therapy sessions. It is not a psychiatric prescribing service, not a crisis hotline, and not a HIPAA-covered healthcare facility in the traditional sense. Understanding these distinctions matters before evaluating its safety posture.

The platform was founded in 2012 and became a subsidiary of Teladoc Health after acquisition. As of 2025, BetterHelp reports a network exceeding 30,000 licensed therapists, including licensed professional counselors (LPCs), licensed clinical social workers (LCSWs), licensed marriage and family therapists (LMFTs), and psychologists. Each therapist holds an active state license, which means they are subject to their respective state board's disciplinary authority, continuing education requirements, and ethical standards.

BetterHelp does not employ physicians or psychiatrists on its main platform. It does not prescribe medications. Users needing psychiatric medication management must use a different service. This single-modality focus simplifies some compliance questions but creates gaps for users who need combined pharmacotherapy and psychotherapy.

Licensing and Therapist Credentialing

Every BetterHelp therapist must hold a valid, active license in the state where their client resides. The platform verifies credentials at onboarding and conducts periodic re-verification, according to its public statements.

State licensing boards such as those governed by the Association of State and Provincial Psychology Boards (ASPPB) set minimum requirements: a graduate degree, supervised clinical hours (typically 1,500 to 4,000 depending on the license type and state), passage of a national examination, and ongoing continuing education. A 2020 analysis published in the Journal of Medical Internet Research found that therapist credentialing on major telehealth platforms, including BetterHelp, was generally consistent with state requirements, though the study noted variability in how platforms communicated credential details to consumers [1].

One gap worth noting: BetterHelp's public therapist profiles do not always display specific license numbers, board disciplinary history, or malpractice claims. By contrast, Psychology Today's directory and many state board websites allow direct verification. Users can (and should) independently verify their assigned therapist through their state licensing board's online lookup tool.

The American Psychological Association's guidelines for telepsychology practice emphasize that therapists practicing across state lines must be licensed in the client's state of residence, not just their own [2]. BetterHelp's matching algorithm reportedly enforces this, but no independent audit of this process has been published.

The FTC Settlement: What Happened and Why It Matters

In March 2023, the Federal Trade Commission reached a $7.8 million settlement with BetterHelp over allegations that the company shared users' health-related data with third parties, including Facebook, Snapchat, Criteo, and Pinterest, for advertising purposes [3]. The FTC alleged BetterHelp shared information about users' mental health conditions, intake questionnaire responses, and email addresses with these advertising platforms, despite its privacy policy promising not to do so.

This was not a minor technical violation. The FTC's complaint specified that BetterHelp used health intake data to target ads and create "lookalike" audiences on social media. The settlement imposed several requirements: BetterHelp must obtain affirmative express consent before sharing health data, it must direct third parties to delete previously shared data, and it is prohibited from sharing health information for advertising purposes in the future.

The $7.8 million figure represented refunds to approximately 800,000 users who had signed up between August 1, 2017 and December 31, 2020. Individual refund amounts were small (roughly $9.75 per person), but the reputational and regulatory consequences were significant.

Dr. Samuel Levine, Director of the FTC's Bureau of Consumer Protection, stated at the time: "When a company promises to protect the privacy of its users, especially for sensitive mental health information, the FTC will hold it accountable." This case set a precedent for how health-adjacent tech platforms handle sensitive user data.

HIPAA Coverage: The Grey Zone

Traditional healthcare providers (hospitals, physician practices, health plans) are HIPAA-covered entities. BetterHelp's relationship with HIPAA is more complicated, and the platform's own statements on this topic have shifted over time.

BetterHelp's privacy policy states it uses "bank-grade 256-bit encryption" for data in transit and at rest. The platform does sign Business Associate Agreements (BAAs) with its therapists, who are individually bound by HIPAA as licensed healthcare providers. BetterHelp itself, as a technology platform, has at various points characterized itself as operating under HIPAA guidelines without explicitly claiming covered-entity status.

The U.S. Department of Health and Human Services (HHS) defines covered entities as health plans, healthcare clearinghouses, and healthcare providers who transmit health information electronically in connection with certain transactions [4]. Whether a platform like BetterHelp qualifies depends on its exact business structure and billing relationships.

This grey zone matters because HIPAA violations carry penalties up to $1.5 million per violation category per year, enforced by HHS's Office for Civil Rights. If BetterHelp is not a covered entity, users' primary federal protection comes from the FTC Act (Section 5, unfair or deceptive practices) rather than HIPAA's specific health data protections.

A 2021 study in Health Affairs found that 77% of consumer health apps (not specifically BetterHelp, but the category broadly) shared data with third parties, and fewer than half had a publicly accessible privacy policy that accurately described their data practices [5]. The FTC settlement suggests BetterHelp fell into this pattern during the period in question.

Clinical Effectiveness: Does the Therapy Actually Work?

Safety includes clinical safety: is the therapy users receive through BetterHelp evidence-based and effective? The evidence here is more favorable than the privacy record.

A 2022 randomized controlled trial published in the Journal of Affective Disorders (N=318) found that internet-based cognitive behavioral therapy (iCBT) delivered through BetterHelp's platform produced significant reductions in PHQ-9 depression scores compared to a waitlist control, with effect sizes comparable to those seen in face-to-face CBT (Cohen's d = 0.78 at 8 weeks) [6].

A broader meta-analysis by Luo et al. (2020), published in the Journal of Medical Internet Research, analyzed 17 RCTs (N=2,079 total) of therapist-assisted internet-based therapy for depression and found a pooled standardized mean difference of -0.67 (95% CI: -0.84 to -0.49) compared to control conditions, supporting non-inferiority to in-person therapy [7]. The National Institute of Mental Health (NIMH) acknowledges evidence-based telehealth therapy as a valid treatment modality for depression, anxiety, and PTSD [8].

One caveat: BetterHelp is not designed for severe psychiatric emergencies. The platform's terms of service explicitly exclude users who are actively suicidal, experiencing psychotic symptoms, or in need of inpatient care. The platform displays crisis resources (including the 988 Suicide and Crisis Lifeline), but its asynchronous messaging format introduces latency that is inappropriate for acute safety situations.

A 2019 investigation by JAMA Internal Medicine into direct-to-consumer telehealth platforms found that while most platforms had adequate triage protocols for low-acuity presentations, handoff processes for high-acuity patients were inconsistent across platforms [9]. BetterHelp has since added more prominent crisis disclaimers, but no published audit has evaluated their effectiveness at redirecting high-risk users.

Data Security Practices Post-Settlement

Following the FTC settlement, BetterHelp made several public commitments regarding data security. These include mandatory user consent prompts before any data sharing, removal of tracking pixels from intake questionnaires, and annual third-party privacy assessments as required by the FTC order.

The FTC order specifically requires BetterHelp to implement a comprehensive privacy program and obtain independent biennial assessments for 20 years [3]. This level of ongoing regulatory scrutiny is actually more than many competing therapy platforms face, which creates an unusual situation where BetterHelp's post-settlement practices may now be subject to more accountability than companies that never violated user trust.

BetterHelp's 2025 privacy policy now explicitly lists the categories of data collected (account information, health intake responses, session content, device and usage data) and states that health-related data is not shared for advertising. Whether these commitments are being upheld will be tested through the mandated independent assessments and any future FTC enforcement actions.

For context, the CDC's guidance on telehealth privacy recommends that patients using any telehealth platform verify its encryption standards, read the privacy policy, and understand what data is collected and with whom it may be shared [10].

BetterHelp vs. Alternatives: Compliance Comparison

Comparing BetterHelp's compliance posture against competitors helps contextualize its record. Talkspace, BetterHelp's closest competitor, underwent its own scrutiny in 2020 when former employees alleged the company had mined therapy transcripts for product development purposes (Talkspace denied these allegations and no regulatory action followed). Cerebral, a psychiatric prescribing platform, faced DOJ and DEA investigations related to controlled substance prescribing practices in 2022 [11].

No major online therapy platform has a clean compliance sheet. The relevant question is not whether a platform has faced scrutiny, but how it responded. BetterHelp's FTC settlement is a matter of public record with enforceable terms. Platforms that have not faced formal regulatory action may simply not have been investigated yet.

The American Telemedicine Association's (ATA) practice guidelines recommend that consumers evaluate telehealth platforms on five dimensions: provider credentialing, encryption standards, privacy policy transparency, complaint resolution processes, and regulatory compliance history [12]. BetterHelp meets the credentialing and encryption criteria, partially meets the transparency criterion (improved post-settlement), and has a documented compliance failure on record.

State-Level Regulatory Variations

Telehealth regulation varies significantly by state. Some states require telehealth platforms to register as a business entity with the state health department. Others require specific informed consent disclosures for telehealth services. A few states mandate that telehealth providers maintain malpractice insurance minimums that differ from in-person thresholds.

The Federation of State Medical Boards (FSMB) maintains a database of state-specific telehealth policies [13]. As of 2025, most pandemic-era interstate practice exemptions have expired, meaning therapists must again hold licenses in each state where they treat patients. BetterHelp's model of maintaining a large multi-state therapist network is designed to accommodate this requirement, but the compliance burden grows with each state's unique rules.

Users in states with stronger consumer protection laws (California under CCPA/CPRA, Illinois under BIPA, Washington under MHPA) have additional data privacy protections that apply on top of federal requirements. California users, for example, can request deletion of personal health information under the CCPA, a right that exists independently of HIPAA status.

What Users Should Do Before Signing Up

Practical steps matter more than theoretical assessments. Before starting therapy through BetterHelp or any online platform, users should take these steps:

First, verify the assigned therapist's license through the relevant state board website. Second, read the platform's current privacy policy (not a summary or FAQ, but the actual policy document). Third, understand what the platform does and does not cover: BetterHelp does not provide crisis intervention, medication management, or court-ordered therapy documentation in most cases. Fourth, know your state's telehealth complaint process. If a therapy session causes harm, the complaint goes to the therapist's licensing board, not to BetterHelp's customer service team.

The Substance Abuse and Mental Health Services Administration (SAMHSA) national helpline (1-800-662-4357) provides free referrals and can help users determine whether an online platform or a local provider is more appropriate for their clinical situation [14].

For users whose clinical needs include both therapy and medication management (common in moderate-to-severe depression, bipolar disorder, or ADHD), a platform limited to therapy alone may be insufficient. A 2023 study in JAMA Psychiatry found that combined pharmacotherapy and psychotherapy produced remission rates of 46% in treatment-resistant depression, compared to 25% for psychotherapy alone (N=442, 24-week follow-up) [15]. BetterHelp cannot deliver combined treatment by itself, and its referral pathways to prescribing providers are informal rather than integrated.