Your AI Therapist Is Not Bound by HIPAA — And That's a Crisis

Millions of people tell AI chatbots things they wouldn't tell their actual therapists. They tell Woebot about their suicidal ideation. They tell Wysa about their relationship trauma. They tell Replika about their loneliness. They tell ChatGPT about their panic attacks at 3am when there's nobody else to talk to. Here's what the apps don't make clear in their onboarding: most AI therapy apps are not covered entities under HIPAA . The conversations you're having aren't protected health information under federal law. They're product data. The HIPAA Gap in AI Mental Health HIPAA applies to: Healthcare providers (doctors, hospitals, therapists) Health plans (insurers) Healthcare clearinghouses Their business associates Woebot, Wysa, Replika, Youper, and most AI mental health apps are consumer wellness applications . They are not covered entities. They are not business associates of covered entities (unless they have a specific B2B clinical integration contract). This means: No breach notific