Mastodawn

Eric deRuiter Apr 7

Headway https://headway.co will soon be requiring identity verification through the Peter Thiel backed Persona—the company Discord was originally using.

Headway is for finding, booking, and paying therapists and psychiatrists. In light of the administration’s view of autism https://www.propublica.org/article/rfk-jr-autism-environment-research-funding and antidepressants https://www.motherjones.com/politics/2024/07/rfk-jr-wants-to-send-people-on-antidepressants-to-government-wellness-farms/ this is rather frightening.

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

Find Therapists Covered by Your Insurance | Headway

Find therapists near you who accept insurance. We'll help you find the right fit—and save you money. Get started today with online or in-person sessions.

Headway

Eric deRuiter Apr 23

Opting out is possible according to their policy which states "Inform each User in writing of the manner in which the User may opt out of the collection, processing, storage or usage of their Biometric Data"

https://headway.co/legal/biometric-data-policy

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

Biometric Data Policy | Headway

Headway biometric data policy for the collection, use, safeguarding, storage, retention and destruction of biometric data.

Headway

Eric deRuiter Apr 23

However in talking to Headway support many times over the past few weeks to try to opt out they eventually told me I can opt out by not using Headway, which means there is not actually an opt out.

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

Eric deRuiter Apr 23

There is a manual review alternative according to this page intended for providers which states "If you're having trouble with the process, Headway's support team can help. You can retry the verification, and if there are persistent issues, you can contact Headway support for a manual review."

https://help.headway.co/hc/en-us/articles/47487122190356-How-identity-verification-affects-your-clients

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

How identity verification affects your clients

Note: Identity verification for patients is currently rolling out to a limited group. If your clients haven't been asked to verify yet, they may be soon – especially if you are a prescriber on Head...

Headway

Eric deRuiter Apr 23

I have been asking for weeks to be allowed to do a manual review but Headway support is ignoring my request and just telling me that I can choose to opt out and stop being a headway customer.

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

Eric deRuiter Apr 23

The barrier to stopping seeing your therapist and / or psychiatrist is high—much more than just changing to a Discord alternative. It seems it will take collective action from many people to force Headway to reverse this dangerous plan.

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

Eric deRuiter Apr 23

You can talk to your provider and see if they are on any alternative platforms to Headway that you can switch to so you can keep seeing them.

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

Eric deRuiter Apr 23

Age / ID verification primer https://this.weekinsecurity.com/papers-please-age-verification-laws-threaten-everyones-online-security-and-privacy/

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

Papers, please: Age verification laws threaten everyone's online security and privacy

Laws that require adults to upload their driver's licenses or passports to access apps, websites, and VPNs will make the entire web less safe.

~this week in security~

Eric deRuiter Apr 23

Persona’s security history https://www.malwarebytes.com/blog/news/2026/02/age-verification-vendor-persona-left-frontend-exposed

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

[updated] Age verification vendor Persona left frontend exposed, researchers say

Behind a basic age check, researchers say Persona’s system runs extensive identity, watchlist, and adverse-media screening.

Malwarebytes

Eric deRuiter Apr 23

Persona’s privacy history https://cybernews.com/privacy/persona-leak-exposes-global-surveillance-capabilities/

https://vmfunc.re/blog/persona/

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

Eric deRuiter Apr 23

This will apply first to people seeing a provider who is prescribing them medicine, but “soon” will expand to everyone including the providers themselves.

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

Eric deRuiter Apr 23

Persona’s policy is "The images obtained from government identification document and photos of your face that you upload, and data from scans of facial geometry extracted from the government identification document and photos of your face that…

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

Eric deRuiter Apr 23

…you upload, are collected, used and stored directly by Persona on behalf of Customer as Customer’s service provider through Customer’s website or app that you accessed."

https://withpersona.com/legal/privacy-policy/

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

Processor Privacy Policy

Eric deRuiter Apr 23

Fortunately there is nothing to worry about as Headway support has told me “With the information we have gathered, I can assure you that your personal information will not be leaked, as Headway prioritizes data privacy and security in full compliance with HIPAA regulations.”

🙄

#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata

@ridogi Because we're much safer than all those other companies that take your privacy seriously that got breached

Eric deRuiter Apr 23

@JSCybersec it had been *months* since a breach happened with this exact company. Ancient history!