From their privacy policy: “Subject to the customer’s retention period, Persona will permanently destroy ID and Selfie Scan Data upon completion of identity verification services or within three years of your last interaction with Persona, consistent with the customer’s instructions unless Persona is otherwise required by law or legal process to retain the data.”

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

You can request your data be deleted, however it will have already been sent to Headway, various third party providers, and the government. Persona can wait three years after your deletion request to actually delete it, or maybe longer if they are required by law to retain it. If you interact with persona it resets that clock.

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

The URL in the post above is not linked from their current privacy policy which seems to be more vague than it was in the past.

Current: https://withpersona.com/legal/privacy-policy/

The link was found on the April 7, 2026 version of that page: https://web.archive.org/web/20260407123739/https://withpersona.com/legal/privacy-policy

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

Processor Privacy Policy

Persona also shares your information with many other companies, including OpenAI and Anthropic for “Data Extraction and Analysis”

https://withpersona.com/legal/subprocessors

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

Subprocessors

Massachusetts has a bill that requires an opt out but it doesn’t apply to health care.

https://malegislature.gov/Bills/194/H96

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

What Is the Illinois Biometric Information Privacy Act?

Illinois’ BIPA sets strict rules on how businesses collect and store biometric data, with real financial penalties for those who don’t comply.

LegalClarity

In NJ for example this bill would require consent, which is not enough as Headway is happy to lose customers who don’t want to give consent. If it is strengthened to require the option of a manual review with your provider or a Headway employee over teleconference, similar to showing your ID when you physically go to a doctor, that would be great.

https://trackbill.com/bill/new-jersey-assembly-bill-1419-prohibits-acquisition-or-disclosure-of-certain-personal-health-information-without-consent/2796330/

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

Talk to your state representatives and governor. New bills could be written or existing bills could be strengthened to force companies like Headway to provide alternatives to online biometric scanning. Governors could write an executive order.

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

Headway is not forced to do Identity verification by any law or regulation such as HIPAA. They are doing it voluntarily.

They state "Headway is acting before a regulatory requirement or potential adverse event that might otherwise cause this process to be rushed."

Source: https://help.headway.co/hc/en-us/articles/43891496595220-Verifying-your-identity-as-a-Headway-client

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

Verifying your identity as a Headway client

Note: Identity verification is rolling out to clients who see prescribers on Headway, in waves over the coming weeks. If you haven't been asked to verify yet, you'll receive a notification when it'...

Headway