Amazon sued under WMHMDA — Feb 2025 · Consumers can sue directly, up to $25,000 + attorney feesAmazon sued under WMHMDA — Feb 2025

For mental wellness, sleep & reproductive health apps · Updated 2026

WMHMDA for Wellness Apps: Meditation, Mood, Sleep & Reproductive Health

Some of the most sensitive data categories in the entire statute live in exactly these app categories

If your app touches meditation, mood tracking, sleep, or reproductive/sexual health, you're operating in the most heavily protected corner of WMHMDA's data categories. Mental health data and reproductive/sexual health data receive particular attention in RCW 19.373 and in privacy advocacy generally — which also means these categories draw outsized scrutiny from regulators and plaintiffs' attorneys alike.

In short: Mental health, sleep, and reproductive/sexual health data are among the most sensitive categories under WMHMDA and draw outsized scrutiny. Extra care is needed for partner-sharing features, geofencing near clinics, and complete deletion on request. Generate matched documents below.

Read the full guide for wellness apps

Wellness data categories and where they show up

  • Mental health data — mood-journal entries, stress or anxiety scores, meditation session frequency tagged to emotional state, therapy-adjacent chatbot conversations.
  • Sleep data — sleep duration, sleep-cycle phase tracking, snoring or sleep-apnea-adjacent detection from smart devices.
  • Reproductive/sexual health data — menstrual cycle tracking, fertility windows, pregnancy tracking, contraception logging, sexual wellness content engagement.
  • Nutrition data — calorie tracking tied to eating-disorder-adjacent or medically-supervised diet plans.

Why this category needs extra care

Beyond the standard WMHMDA obligations, apps in this space should think carefully about: (1) whether any advertising or analytics SDK could infer sensitive health status from usage patterns even without direct data sharing; (2) whether the app's geolocation features could interact with the geofencing restriction around reproductive or mental health facilities; and (3) whether deletion requests are honored completely, given how sensitive re-exposure of this data could be for a user.

Example: a period-tracking app with a partner-sharing feature

A period-tracking app that lets a user optionally share cycle data with a partner needs: a privacy policy disclosing reproductive health data collection and the partner-sharing feature specifically; opt-in consent to collect cycle data; a distinct, separate opt-in specifically for enabling partner sharing (this is "sharing," not "collection," and needs its own consent); and a straightforward way for the user to revoke partner access at any time, consistent with the right to withdraw consent.

A meditation app example

A meditation app that logs session length and a post-session mood rating ("How do you feel? 1-5") is collecting mental health data the moment that rating is stored against a user profile — even though the app's primary purpose is relaxation, not clinical mental health treatment. The privacy policy should disclose this category explicitly rather than describing the app generically as a "wellness" or "lifestyle" product.

AI chatbots and mental-health AI companions

A growing category of wellness apps replace (or supplement) static mood logging with an AI chatbot or "AI companion" the user talks to about how they're feeling. Every message a consumer types into that chatbot — venting about anxiety, describing a symptom, asking for coping strategies — is mental health data the instant it's stored, whether or not a human ever reads it. If the chatbot is powered by a third-party large language model API, sending that conversation to the model provider can itself be a "sharing" event requiring its own opt-in, separate from the consent to use the app at all. Model-training use of conversation data is a purpose that needs its own explicit disclosure in the privacy policy — "to improve our AI" is not specific enough on its own.

Get documents that reflect your app's real sensitivity

The WMHMDA Compliance Pack builds a privacy policy, consent form, sale authorization, retention schedule, and rights form matched to your specific data categories. Read everything free before you pay — $99.99 one-time.

Generate My Compliance Pack — $99.99

Legal limitations

Given the sensitivity of mental health and reproductive health data, we strongly recommend attorney review beyond this generator's draft documents, particularly regarding cross-state data transfer risk and any features involving sharing with partners, family members, or health care providers.

FAQ

Is mood-journal data in a meditation app considered consumer health data?

Yes — mental health data, including self-reported mood, is explicitly covered.

Does a period or fertility tracking app need a WMHMDA privacy policy?

Yes — reproductive/sexual health data is one of the most explicitly protected categories.

Do wellness apps need consent before showing personalized content based on mood data?

Consent is required for collection regardless, and a separate consent is required for sharing that data with any third party.

Does wmhmda or mhmda apply to sleep-tracking smart mattresses and apps?

Yes — sleep data is explicitly named as a consumer health data category under the statute.

Does an AI chatbot or mental-health AI app need to comply with WMHMDA?

Yes — a conversation with an AI mood or mental-health chatbot reveals health status the moment it's typed, so it's consumer health data. That triggers privacy policy disclosure, opt-in consent, a separate opt-in if chats are shared with a third-party AI/LLM provider, and a deletion process for chat history.

Sensitive data deserves careful compliance

5 documents, generated from RCW 19.373, read free before you pay.

Generate My Compliance Pack — $99.99
Get the Pack — $99.99