Short of, or in addition to, an official evaluation system, experts say therapists can watch for these red flags when they encounter mental health apps in their clinics—or in the digital wild.
A lack of privacy protections. In Schueller’s 2019 study published in Internet Interventions (Vol. 15)opens in new window, he and colleagues evaluated 116 mobile apps for depression. When reviewing their data security and privacy policies, they found only five apps received a transparency score of “acceptable,” while the majority (68%, or 79 apps) were “unacceptable.” Just over half had no privacy policy at all. “So they didn’t tell you anything about what they do with the data,” Schueller said.
That’s why Wood recommends approaching using apps with a specific purpose, like helping to treat insomnia, rather than using them as general wellness tools that are more likely to lack privacy protections like HIPAA compliance. “What’s the true cost of using a tool?” she asked. “It might be free to start, but what are you not getting—and what are you giving away?”
No crisis intervention. Any app someone is using for mental health support should have a clear way to connect to real-world help, Wood said. “There’s got to be a direct way to get to a human helpline very quickly, where you’re off the app, and you’re talking to someone because you may be in crisis,” she said.
An inability to download your own data. Apps should also give users ownership over their own information. “If someone is using an app for tracking something like their sleep or fitness, I want them to be able to make that data their own and look at it in conjunction with other things,” said Morris, who, along with colleagues at the University of Washington and Columbia University, has been studying how AI can help clinicians analyze data from watches and phones to understand patient’s sleep, activity, and other patterns. “If they want to be able to share it within the context of therapy, something that’s totally insular and locked down seems less useful.”
It may also be impractical if the app is intended to be a part of the patient’s care plan, Brumder Ross said. “If you’re recommending an evidence-based, clinically safe, data-secure app, that’s an extension of the trust in your relationship,” she said. “So you want to be sure that that data is going be used and clinically informed in the treatment.”
Overblown claims. A reputable app should also be up front about what it can and can’t provide. And if the product does say it’s rooted in a certain psychological principle or therapeutic technique, that method should be front and center and accurate.
“You have to be careful because they can say, ‘Cognitive behavioral therapy works, and it works in digital formats,’ and that’s great,” Schueller said. “But if the app doesn’t actually deliver cognitive behavioral therapy, it’s not so beneficial.”
A spotty evidence base. Likewise, while most mental health apps claim they’re scientifically sound, few actually mean the product itself has been proven to do what it says it does. In fact, one of Schueller’s studies found that less than 4% of anxiety apps had undergone a randomized clinical trial for feasibility and efficacy (Cognitive and Behavioral Practice, Vol. 25, No. 4, 2018opens in new window).
“That’s not to say that there’s not a strong evidence base that these things work—there are hundreds of randomized controlled studies that demonstrate that digital mental health can be effective and impactful,” Schueller said.
But for consumers, there’s an easy-to-overlook difference between evidence-based and evidence-informed, Kuhn agreed. “A lot of times you’ll see apps that say, ‘This is evidence-based,’ and then you go to the part of their website that shows the evidence base, and it has nothing to do with the app,” he said.
No mental health expert or organization involved. Apps backed by clinicians can add a vote of confidence, Brumder Ross finds. While psychologists’ goals are likely improved mental health and well-being outcomes, product developers’ goals are often to keep users engaged. “If the app’s measure of success is time on the platform, the entire motivation is keeping your attention for as long as possible,” she said. “So I like to look at apps that have clinicians who have informed their treatment and their protocol.”
Kuhn recommends looking into whether the app was developed by or in partnership with a reputable organization like a university, hospital, or the VA.
Poor functionality. Kuhn prioritizes apps that are available on both iOS and Android and those that don’t need internet access after being downloaded. “This is good for folks who might be in rural areas or for military service members who are deployed,” he said.
It’s also helpful to know how recently the app was last updated. If it has been more than 6 months or a year, the app could have been abandoned and is at higher risk of security breaches. Ease of use matters, too. “Is it pleasant to use? Can it be accessed by users with disabilities? What’s the reading level? How tech-savvy does the user need to be to be able to use the app?” Kuhn said to ask. “If it’s difficult to navigate, if the user interface isn’t pleasant, isn’t engaging, folks will just stop using it.”
An app that acts more like a friend than a therapeutic tool. Apps—particularly those that integrate AI-enabled chats—should stick to their purpose (say, helping patients tackle twice-daily CBT exercises) and stay out of “companion” territory. Bots that float between friend, colleague, family member, and even love interest can be “incredibly disorienting” to people seeking mental health support, Wood said.
“Could you imagine if your therapist just started flirting with you? This is ethically very, very wrong,” she said. “It’s the same thing for these apps. You want to make sure it doesn’t become fluid in its role, but it’s simply there to say, ‘I am here to help you with your grounding exercises or your reflective journaling,’ and that’s it.”
Good fit-for-purpose models, by contrast, “give clear reminders of non-personhood, meaning they’re letting you know, hopefully at regular intervals, ‘Hey, I’m an app, I’m a machine,’ or ‘I’m a large language model. I’m not a person,’” Wood said. “They should not be simulating relationships as much as they should simply be helping the development of certain skills.”
A quality mental health app shouldn’t sweet-talk users into lingering longer either. But some research shows 37% of farewells analyzed across relational apps use manipulative tactics like enticing them into engaging more (“Going so soon? One more thing!”) even after the user has indicated their intent to leave (De Freitas, J., et al., Harvard Business School Marketing Unit Working Paper 26-005, 2025opens in new window). “That’s another huge red flag,” Wood said. Like a therapist seeing a patient out at a session’s close, an ethical app simply says, “Bye.”