- Despite the continued drumbeat for better safety and security, a majority of mHealth apps designed for patients with dementia and their caregivers aren’t protecting health information.
"[N]o one using an app for a mental health-related reason should assume that privacy and security measures are in place,” Ipsit Vahia, MD, medical director of Geriatric Psychiatry Outpatient Services at McLean Hospital in Belmont, Mass., and lead author of the study, said in a recent press release issued by the hospital.
Vahia, who conducted the study with Lisa C. Rosenfeld, MD, a resident in the MGH/McLean Adult Psychiatry Residency Training Program, and John B. Torous, MD, of Beth Israel Deaconess Medical Center, said the research "represents a note of caution to researchers (and) clinicians, as well as patients and their families" using mHealth apps.
It also "also points to a role for professional organizations and advocacy groups in helping educate mobile health consumers on how to best make decisions about using this technology," he added.
Of the 125 apps tested, the study reported, only 33 of the 72 apps that collected personal information had privacy policies that could be accessed by the user. Many more, it said, had “a preponderance of missing information.”
“[T]he majority acknowledged collecting individual data for internal purposes, and most named instances in which user data would be shared with outside parties,” the study, published in the August issue of The American Journal of Geriatric Psychiatry, added.
It’s the latest indication that the mHealth industry is still trying to come to grips with app security, particularly in apps that are marketed directly to consumers. And it underscores federal and academic programs to develop mHealth app standards and efforts by groups like HIMSS and the American Medical Association to create protocols to vet and certify mobile health apps.
“Given that some health and fitness apps can access sensitive, physiological data collected by sensors on a mobile phone, wearable or other device, their below-average performance is both unexpected and troubling,” that report stated.
Vahia, whose team selected iPhone apps for their study by using the searches “health & fitness + dementia” and “medical + dementia,” said his study should serve as a wake-up call for both patients and their caregivers who may be diving into mHealth without fully researching the consequences
"n order for technology to realize its full potential in mental health, users need to feel confident about the security and privacy of the information that is collected," he said. Likewise, "clinicians should educate themselves and their patients about issues related to the data collected" before recommending an app.
Not doing so, he said, "could be akin to prescribing a medication without being aware of or disclosing risks and side effects."