Headway, a leading online therapy platform, has mandated biometric face scans for all users and providers as part of its identity verification process. The move, effective April 3, requires users to submit a government-issued ID photo and a live facial scan via their device’s camera, with no opt-out option beyond abandoning the service. The scans involve head movements to capture facial data, which the company claims is solely for identity confirmation.

The change follows Headway’s email notification to users, which outlined the new protocol as a measure to enhance platform security. However, the lack of transparency about data storage or third-party sharing has raised red flags. Critics argue the policy forces users into a privacy trade-off: surrender biometric data or lose access to critical mental health resources.

This decision highlights growing tensions between digital healthcare innovation and user privacy. While biometric authentication can deter fraud, its implementation here feels coercive, particularly for individuals with limited therapeutic alternatives. The policy’s rigidity underscores a broader industry challenge: balancing security needs with ethical data practices. For now, Headway’s approach risks alienating users who prioritize confidentiality.

Headway’s biometric mandate sets a concerning precedent for how tech-driven health platforms handle sensitive user data, prioritizing security theater over informed consent.