Most people think of data privacy as a technology problem. A legal problem. A policy debate for lawmakers and Silicon Valley executives. They are wrong. Data privacy is a mental health issue, and the clinical evidence for this has been accumulating for years while the broader conversation has barely caught up.
I have spent a significant part of my career as a licensed clinician and researcher sitting across from people who are quietly being harmed by forces most of them cannot name. Fear of being watched. Shame about seeking help. Paralysis after a data breach. These are not abstract digital concerns. They are real symptoms showing up in real therapy rooms every single day in 2026.
This intersection is the reason I founded MyDataKey and why The Invisible Data, Volume 6 of The Invisible Series, exists. The conversation about who owns your personal health data and what happens to it is not separate from mental wellness. It is central to it.
The Hidden Cost of Living in a Surveillance Economy
We accept an extraordinary amount of observation as normal life. Your phone tracks your location. Your apps log your moods, your cycles, your sleep, your search history. Your insurance company may access data you do not even realize you agreed to share. Your employer has tools that monitor your productivity, your keystrokes, your facial expressions during video calls.
This level of surveillance is genuinely unprecedented in human history. And the human nervous system was not designed for it.
When people feel watched, they change their behavior. That is not a theory. It is observable in clinical settings. I see patients who self-censor their internet searches related to mental health symptoms because they fear what will happen to that data. I see people who avoid using their insurance for therapy because they do not want a mental health diagnosis on their permanent record. These are rational responses to a system that has repeatedly shown it cannot be trusted with sensitive personal information.
The psychological term for the ongoing stress of existing under surveillance is not complicated. It maps directly onto chronic threat activation. The brain reads being monitored as a low-grade danger signal. Over time, that signal erodes psychological safety, the foundational condition that makes healing, growth and authentic self-expression possible.
Data Breaches and the Anxiety They Leave Behind
A data breach is not just an IT incident. For the person whose mental health records, medication history or therapy notes were exposed, it is a violation. It registers psychologically the same way many other violations do: with hypervigilance, shame, a profound loss of control and recurring intrusive thoughts about what strangers might know.
Healthcare data breaches have become alarmingly routine. When a hospital system, a telehealth platform or a pharmacy benefits manager is compromised, the people affected are not told, "Your credit card number was stolen." They are told, in clinical language buried in a notification letter, that their most private human struggles may now exist in someone else's database.
The anxiety that follows is not irrational. It is a reasonable response to a real threat. But it is also compounding. People who have already been through one healthcare data breach show measurably higher resistance to engaging with digital mental health tools afterward. They are less likely to use mental health apps. Less likely to store records electronically. Less likely to pursue telehealth services even when those services would benefit them.
This is a public health problem. Privacy failures have a downstream clinical impact that nobody is tracking systematically, and that invisibility is part of why the problem persists.
How Surveillance Fears Stop People from Seeking Therapy
The stigma around mental health care has many layers. The social layer gets the most attention. But there is a structural layer that clinicians like me see clearly: people avoid therapy because they do not trust what will happen to the records of their most vulnerable moments.
This is especially acute for specific populations. People in certain professions who hold security clearances, commercial pilots, healthcare providers and law enforcement officers often know that a mental health diagnosis can have career consequences. The system tells them to seek help, and the same system creates the structural incentive not to. That tension does not resolve. It festers.
Military veterans are another population I have worked with extensively. Many are intimately aware that their healthcare records exist across multiple federal systems. The fear of what a documented PTSD diagnosis means for future disability claims, employment or firearms rights creates a real barrier to disclosure. They will sit in a session and carefully avoid the language that triggers a formal diagnosis because they have learned the record matters as much as their healing.
This is not a failure of courage. This is a rational calculation inside a broken system. Until the system earns trust, clinicians working within it are asking people to accept a risk they have every reason to distrust.
Surveillance anxiety about therapy is also rising among younger adults who are deeply literate about how their data moves. Gen Z patients in particular frequently ask me direct questions: Where are my session notes stored? Who can access this? Can my insurance company see what I disclosed? These are good questions. They deserve honest answers, and the honest answer is often more complicated than patients deserve to hear.
The Invisible Data Thesis: What Volume 6 Argues
The Invisible Data is the sixth book in The Invisible Series, and it makes an argument that I believe is urgent: your personal health data is an extension of your identity, and stripping you of control over it is a form of harm.
The thesis is not primarily technical. It is philosophical and clinical. I argue that data dignity, the right to know what exists about you, who holds it and how it is being used, is not a luxury feature of digital life. It is a prerequisite for genuine mental health in a data-saturated world.
The book explores what I call "invisible data burden": the psychological weight carried by people who know their most sensitive information is out there somewhere but have no mechanism to locate, correct or reclaim it. That burden is real. It contributes to a chronic low-level state of helplessness that undermines therapeutic outcomes, makes self-disclosure harder and erodes the trust that mental health care depends on.
The Invisible Series has always been about illuminating what harms people that no one names out loud. Volume 6 names this one directly. If you want to understand your own relationship to your health data, this is the book I wrote for that conversation.
MyDataKey and the Case for Dignity-Centered Data Control
MyDataKey was built from a clinical premise, not a technology premise. The premise is simple: people should be the primary custodians of their own health information. Not insurance companies. Not hospital systems. Not app developers who monetize wellness data. The person whose life that data represents.
What MyDataKey does is give individuals a portable, secure record they control and can share selectively. For mental health specifically, this matters enormously. A patient who controls their own record decides what a new clinician sees. A veteran decides what gets submitted for a disability review. A person in crisis decides what the emergency room needs versus what stays private.
That level of control is not just practically useful. It is therapeutically meaningful. Autonomy is one of the core conditions of psychological wellbeing. When people experience agency over their own narrative, including the data narrative, their engagement with care improves. Their willingness to disclose improves. Their trust improves.
I founded MyDataKey because I watched too many patients disengage from care not because they did not want help but because the system made help feel dangerous. Giving people back control over their own health records is an act of clinical advocacy, not just a technology service.
A Clinician's Perspective on Digital Rights as Mental Healthcare
As a Licensed Professional Counselor and National Certified Counselor, I operate under ethical obligations that include confidentiality, informed consent and client welfare. Every one of those principles is threatened when the systems I rely on cannot protect client data adequately.
The mental health profession has been slow to fully reckon with this. We talk about therapeutic alliance, trauma-informed care and evidence-based practice. We talk far less about the digital infrastructure our work runs on and what it costs our clients when that infrastructure fails them.
I believe that needs to change. Advocating for patient data rights is part of the clinical role. Choosing platforms and tools that respect client privacy is an ethical responsibility. Informing clients clearly about how their records are stored and who can access them is a component of genuine informed consent.
This is also why I founded TheraPetic® Healthcare Provider Group with a deliberate commitment to ethical data practices built into the clinical model from the beginning, not retrofitted after the fact.
Mental health advocates have spent decades fighting stigma. The next frontier is fighting the structural conditions that make stigma worse. Surveillance, data insecurity and the loss of control over personal health information are structural conditions. They belong in the advocacy conversation.
What You Can Do Right Now
You do not have to wait for policy to catch up to protect yourself. Here are concrete steps that matter in 2026.
- Know what data your mental health apps collect. Read the privacy policy. Look for language about whether your data is sold to third parties or shared with data brokers. If the policy is unclear, that is itself a red flag.
- Ask your therapist directly about data storage. Where are your session notes kept? What platform is used? What happens to your records if the practice closes? You have a right to those answers.
- Use your HIPAA rights. Under the Health Insurance Portability and Accountability Act, you have the right to access your own medical records, request corrections and receive an accounting of certain disclosures. Most people never use these rights. Start using them.
- Consider a personal health record solution. Tools like MyDataKey exist specifically to give you portable ownership of your health data instead of leaving it scattered across systems you do not control.
- Talk about this. Normalize the conversation about digital rights in mental health spaces. The more people understand the connection, the more pressure builds for the structural changes that protect everyone.
Your data is not abstract. It is a digital record of your most vulnerable, most human moments. You deserve to know where it lives, who sees it and how it is protected. Claiming that knowledge is an act of self-advocacy, and self-advocacy is always a clinical good.
To go deeper on this topic, I encourage you to explore The Invisible Series and to learn more about my clinical work and research at drpatrickfisher.com/about. The conversation about data privacy and mental health is one we need to be having loudly, and I intend to keep having it.