Consumer Apps · Health/Fitness (mental wellness) · Structural / no discrete incident
Headspace
Headline
Mozilla's Privacy Not Included guide flagged Headspace in 2023 for sharing personal and app-usage data with third parties such as Google and Facebook for ad targeting…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
Mozilla's Privacy Not Included guide flagged Headspace in 2023 for sharing personal and app-usage data with third parties such as Google and Facebook for ad targeting — and its own privacy policy lists RESPONDING TO SUBPOENAS as a stated use of your data, with no defined limit on how long it's kept. A meditation app meant to help you decompress can also become evidence in a legal proceeding you have nothing to do with.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected.
Data sharing
Same HIPAA-gap category issue as Fitbit/Strava above; Mozilla's Privacy Not Included guide (2023) flagged Headspace for sharing personal and app-usage data with third parties such as Google and Facebook for advertising (a circulating '7 of 9 data points / 78%' statistic could not be sourced this pass); Headspace's own privacy policy explicitly lists RESPONDING TO SUBPOENAS AND COURT ORDERS as a stated use of retained personal data, and does not commit to deleting data after a defined retention period — meaning conversations/mood logs a user shares with a meditation app could later be subpoenaed in unrelated legal proceedings (e.g., divorce, custody, criminal cases), a genuinely under-appreciated risk for a mental-wellness product.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy headspace.com/privacy | Not fetched yet | NO (HTML only) |
| Terms of service headspace.com/terms-of-service | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.