{"id":46445,"date":"2022-05-02T08:00:00","date_gmt":"2022-05-02T08:00:00","guid":{"rendered":"http:\/\/d534b7a6-f2f8-4d47-87db-68adee4c10dd"},"modified":"2022-05-02T08:00:00","modified_gmt":"2022-05-02T08:00:00","slug":"mozilla-finds-mental-health-apps-fail-spectacularly-at-user-security-data-policies","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/mozilla-finds-mental-health-apps-fail-spectacularly-at-user-security-data-policies\/","title":{"rendered":"Mozilla finds mental health apps fail ‘spectacularly’ at user security, data policies"},"content":{"rendered":"
\n
\n
\"Charlie<\/span> <\/a> <\/div>\n<\/p><\/div>\n<\/p><\/div>\n

An investigation into mental health and prayer apps has revealed a disturbing lack of concern surrounding user security and privacy. <\/p>\n

On Monday, Mozilla released the findings of a new study into these types of apps, which often deal with sensitive topics including depression, mental health awareness, anxiety, domestic violence, PTSD, and more, alongside religion-themed services.<\/p>\n

\n

ZDNet Recommends<\/span> <\/h3>\n

\"The<\/span> <\/span> The best security key <\/span> <\/a> While robust passwords help you secure your valuable online accounts, hardware-based two-factor authentication takes that security to the next level. <\/span> <\/div>\n

According to Mozilla’s latest *Privacy Not Included<\/a> guide, despite the deeply personal information these apps manage, they “routinely share data, allow weak passwords, target vulnerable users with personalized ads, and feature vague and poorly written privacy policies.” <\/p>\n

In a study of 32 applications geared toward mental health and religion, the organization found that 25 of them did not meet Mozilla’s Minimum Security Standards. <\/p>\n

These standards act as a benchmark<\/a> for the *Privacy Not Included reports. The mismanagement or unauthorized sharing and sale of user data, vague data management policies, a lack of encryption, weak password policies, no clear vulnerability management system, and other lax security policies can all downgrade a vendor product in the eyes of Mozilla. <\/p>\n

If an app or service fails to meet these basic requirements, they are slapped with the “*Privacy Not Included” warning label. <\/p>\n

The mental health and prayer-related apps have received an accolade — but not one you’d covet. The company says:<\/p>\n

“When it comes to protecting people’s privacy and security, mental health and prayer apps are worse than any other product category Mozilla researchers have reviewed over the past six years.” <\/p>\n

The organization examined apps including Talkspace, Better Help, Calm, Glorify, 7 Cups, Wysa, Headspace, and Better Stop Suicide. As a result, each app now has a dedicated space that can be accessed to find out more about the software’s privacy and security rating. <\/p>\n

For example, Better Stop Suicide<\/a>, a suicide prevention app, failed Mozilla’s test. <\/p>\n

\"screenshot-2022-04-28-at-09-29-25.png\"<\/span>