Mozilla analysis of 32 mental health and prayer apps shows 29 have lax privacy and security practices and collect large amounts of data
Prayer apps were also worse than other categories — As a category, mental health apps have worse privacy protections for users than most other types of apps … Source: Mozilla Foundation .
Context & Ripple Effects
Mozilla's audit of 32 mental health and prayer apps is the latest entry in a years-long research arc: researchers already found in 2019 that 33 of 36 depression and smoking-cessation apps shared data with third parties, some passing along diary entries, and reporting on therapy apps like Better Help showed third parties being notified when sessions opened and even when a patient reported suicidal thoughts.
The new finding extends the pattern to two adjacent categories — and adds a twist: prayer apps fare worse than the rest, meaning spiritual life is now part of the same exposed data surface. It also lands between Mozilla's later work flagging 18 of the top 25 period and pregnancy tracking apps and its analysis showing nearly 80% of top Android apps had gaps between privacy policies and Data Safety labels, together sketching a systematic failure across sensitive-app categories rather than isolated bad actors.
First-order effects
- Users of the 29 flagged apps are carrying sensitive mental-health and religious activity into ad and analytics pipelines with little protection, often without meaningful disclosure.
- The named app developers face immediate reputational exposure, since Mozilla's methodology makes individual privacy grades comparable and publishable.
Second-order effects
- App stores and platform gatekeepers come under pressure to police a category where their own self-reported labels have already been shown unreliable, forcing stricter review of health-adjacent listings.
- Privacy-forward rivals in mental health and faith apps gain a marketing wedge, as 'not flagged by Mozilla' becomes a differentiator in categories where trust is the product.
Third-order effects
- If every Mozilla audit keeps returning the same result across categories — fertility, therapy, prayer — the likely endpoint is regulatory treatment of consumer health apps as a distinct compliance class rather than ordinary software.
- The recurring gap between stated policies and actual data flows points toward independent auditing becoming a standing function for nonprofits like Mozilla, filling an enforcement vacuum left by platforms and regulators.
The trend: Mozilla's successive audits are establishing that consumer apps touching health, reproduction, and spirituality form a chronically under-protected data category that neither store labels nor current regulation adequately covers.