I haven't scrubbed through all 24 pages of this thread, but wanted to share my concerns on their privacy policy, which basically states they can share your data for "analysis and research" purposes, as well as selling "some of their assets including your personal information"
Sounds me like there is a high likelihood of this data being used to train AI. Even if they aren't using it to train AI though, they are at least trying to aggregate data to detect trends or correlations. EVEN IF this isn't the case RIGHT NOW, they could still turn around in 3 months, and sell their data or company to some big company which in turn then uses that data to train an AI. No matter what, user data is, without a doubt, being logged and recorded for some unknown, undisclosed reason.
I'll just give a few excerpts from their privacy policy:
all communications transmitted through the Platform, may be recorded or monitored for [...] training purposes and become part of your file and records.
We may share aggregated information that does not include any Personal Information with third parties for any purpose, including but not limited to industry analysis, research, business transactions and public relations.
Basically they can share any information for any reason with anyone.
We may sell or transfer some or all of our assets, including your Personal Information, in connection with a merger, acquisition, consolidation, joint venture, reorganization or sale of assets. Such transactions would be covered by a confidentiality agreement.
This does not lay out ANY terms for such "confidentiality agreement", so you're guaranteed nothing if/when they sell your data. Most likely they'd just anonymize the data and feed it to an AI.
Your information may be transferred [...] outside of your state, province, country or other governmental jurisdiction where the privacy laws may not be as protective as those in your jurisdiction. If you are located in the United States and choose to provide information to us, we may also transfer some Personal Information outside of the US and processes it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to such transfers.
US privacy laws too strict? No problem, they'll just transfer the data outside the US and do what they want with the data. No problems there! /sneed
we may retain an archived copy of your records as required by law for legitimate business purposes or for recordkeeping purposes. There may also be residual information that will remain within our databases and other records, including, without limitation, some data may that may be still archived and stored offline.
Want data deleted? Ok. But we're gunna keep a copy of it offline. Why? Oh we can train our AI offline, so doesn't really matter if someone asks for their data to be deleted.
We are not responsible for removing information from the third parties that we have already legitimately shared Personal Information about you.
I don't know if this is trying to say 'from third parties that have already shared...' or 'from third parties that we we have shared info with...'
But this could mean that if they transfer your data to someone else, they aren't responsible for deleting it, and since you don't know who they share data with, you can't ask for your information to be deleted. This seems sketchy and could be a another way for them to record and keep data without violating the privacy policy and GDPR.
They also acknowledge that they may receive health related data. So then how / why can they then share and sell this data in the US?
In some cases, some of the Personal Information that you give to us may be considered health related data.
It really seems like this is just a HPAA lawsuit just waiting to happen.
source:
https://www.betterhelp.com/privacy/
Accessed on: October 5th, 2018
Last Update: August 7, 2013 - Privacy Policy / September 14, 2018 - GDPR
