Headway support said they will keep the data for 6-7 years.

“Your information from the ID verification (IDV) process is securely stored within Headway and will not be shared. This process is required to confirm your identity and follow federal privacy laws, with data kept for about 6–7 years before deletion.”

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

That is quoted from https://withpersona.com/blog/hipaa-verification

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

Persona retains your information for a minimum of 6 years!

“It’s also important to note that in each of the cases discussed below, covered entities are required to retain records of all PHI disclosures for a minimum of six years. This includes retaining a record of any information collected as a part of the verification process, as well as copies of any documents or photos collected.”

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

From their privacy policy: “Subject to the customer’s retention period, Persona will permanently destroy ID and Selfie Scan Data upon completion of identity verification services or within three years of your last interaction with Persona, consistent with the customer’s instructions unless Persona is otherwise required by law or legal process to retain the data.”

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

You can request your data be deleted, however it will have already been sent to Headway, various third party providers, and the government. Persona can wait three years after your deletion request to actually delete it, or maybe longer if they are required by law to retain it. If you interact with persona it resets that clock.

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

The URL in the post above is not linked from their current privacy policy which seems to be more vague than it was in the past.

Current: https://withpersona.com/legal/privacy-policy/

The link was found on the April 7, 2026 version of that page: https://web.archive.org/web/20260407123739/https://withpersona.com/legal/privacy-policy

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

Persona also shares your information with many other companies, including OpenAI and Anthropic for “Data Extraction and Analysis”

https://withpersona.com/legal/subprocessors

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

https://www.reuters.com/business/healthcare-pharmaceuticals/kennedys-health-officials-explored-us-ban-some-widely-used-antidepressants-2026-05-08/

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

Massachusetts has a bill that requires an opt out but it doesn’t apply to health care.

https://malegislature.gov/Bills/194/H96

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata