Online mental‑health provider Headway is rolling out a policy that forces clients and therapists to verify their identity with a government‑ID photo and a live facial scan, leaving users with no opt‑out other than abandoning the service.

Headway, a well‑known platform that connects patients with licensed therapists via video, chat and messaging, announced a new identity‑verification requirement that will affect every active user. The change, communicated in an email sent on April 3, mandates that both clients and providers upload a picture of a government‑issued ID and complete a live facial scan using their device’s camera.
The policy in detail
The email, which was shared with 404 Media, explains the steps clearly:
- Upload a photo of a valid government‑issued ID (driver’s license, passport, etc.) through the user portal.
- Perform a live facial scan – the app will ask the user to turn their head side‑to‑side while the camera records a short video clip.
- The platform assures that "the facial image is never used for anything but identity verification."
Headway frames the move as a safety measure, claiming it will keep the service "safe and reliable" for both patients and clinicians. No alternative verification method is offered, and the email states that the only way to avoid the scan is to stop using Headway altogether.
Why it matters for the tele‑health market
Biometric verification is becoming more common in financial services and high‑risk online platforms, but its adoption in mental‑health care raises distinct concerns:
- Privacy expectations: Patients often choose tele‑therapy for its relative anonymity. Introducing mandatory facial data collection could deter users who are already wary of digital surveillance.
- Regulatory scrutiny: Health‑information privacy laws such as HIPAA in the United States do not explicitly cover facial biometrics. Regulators may question whether storing or processing such data adds unnecessary risk.
- Competitive pressure: Competing services like BetterHelp, Talkspace and newer decentralized therapy apps have not announced similar requirements. If users view Headwise’s policy as intrusive, they may migrate to platforms that keep biometric data out of the equation.
Potential trade‑offs
From a security standpoint, linking a government ID to a live facial scan can reduce the likelihood of impersonation attacks, which could protect both patients and clinicians from fraud. However, the benefit must be weighed against:
- Data‑security overhead: Storing facial video clips demands robust encryption, strict access controls and clear data‑retention policies. Any breach could expose highly personal biometric identifiers.
- User friction: Requiring a live scan adds a step that can be technically challenging for users with older devices, limited bandwidth, or accessibility needs.
- Legal exposure: If Headway’s data‑handling practices do not meet emerging state laws (e.g., Illinois’ Biometric Information Privacy Act), the company could face lawsuits and fines.
Community reaction
Early responses from Headway’s user community have been mixed. Some therapists appreciate the added layer of security, noting that it could help verify that a client is indeed who they claim to be. Others argue that the requirement feels excessive for a service that already uses encrypted video calls and secure messaging.
Patients, especially those dealing with anxiety, trauma or privacy‑sensitive conditions, expressed discomfort. One user wrote, "I signed up for therapy because I wanted a safe space. Being forced to give my face to a company feels like the opposite of safe."
What’s next?
Headway has not disclosed a timeline for when the verification will become mandatory, nor have they provided details on how long the facial data will be retained. The company’s next public statement is expected in the coming weeks, likely addressing user concerns and outlining any opt‑out mechanisms that may be introduced.
For now, the policy stands as a clear example of how tele‑health platforms are balancing security needs with user privacy expectations. As more providers experiment with biometric checks, the industry will need to develop standards that protect both data and the therapeutic relationship.
If you’re interested in following this story as it develops, consider subscribing to 404 Media for full access to future updates.

Comments
Please log in or register to join the discussion