Replying to
@foone It sucks when it is not age verification but identity verification required for getting health care. https://mastodon.social/@ridogi/116363622973718467
Remote
Eric deRuiter
@ridogi@mastodon.social
mastodon 4.8.0-nightly.2026-10-06He / Him
🌱 Vegan for the animals
🍎 Apple nerd
🎲 Board gamer
🎶 Mountain Goats aficionado
💍 Husband
🐈🐈 Cat dad
💻 Apple and 🔐 Security IT Consultant
🚫 AI
#nobots
🍉
0 Followers
0 Following
50 Posts
Joined August 13, 2018
website:
website:
Replying to
For those of us who feel stuck between not wanting to leave our providers and not wanting to give up our privacy to Persona it would take collective action from many customers to force Headway to reverse this terrible decision.
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
@syntaxseed@phpc.social I have not looked at it since this thread, but as of then Drip (and Euki) back up your data to iCloud. https://mastodon.social/@ridogi/114021216776592007
Replying to
I have heard that providers are getting emails telling them that they have to verify their ID by the end of May.
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
The barrier to stopping seeing your therapist and / or psychiatrist is high—much more than just changing to a Discord alternative. It seems it will take collective action from many people to force Headway to reverse this dangerous plan.
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
This will apply first to people seeing a provider who is prescribing them medicine, but “soon” will expand to everyone including the providers themselves.
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
![[updated] Age verification vendor Persona left frontend exposed, researchers say](https://www.malwarebytes.com/wp-content/uploads/sites/2/2026/02/age-verification.jpg)
Replying to
Headway is not forced to do Identity verification by any law or regulation such as HIPAA. They are doing it voluntarily.
They state "Headway is acting before a regulatory requirement or potential adverse event that might otherwise cause this process to be rushed."
Source: https://help.headway.co/hc/en-us/articles/43891496595220-Verifying-your-identity-as-a-Headway-client
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
This guy should definitely be told who is on antidepressants. https://skipcut.com/watch/RsisHdJRjQE
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
Replying to
Fortunately there is nothing to worry about as Headway support has told me “With the information we have gathered, I can assure you that your personal information will not be leaked, as Headway prioritizes data privacy and security in full compliance with HIPAA regulations.”
🙄
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
There is a manual review alternative according to this page intended for providers which states "If you're having trouble with the process, Headway's support team can help. You can retry the verification, and if there are persistent issues, you can contact Headway support for a manual review."
https://help.headway.co/hc/en-us/articles/47487122190356-How-identity-verification-affects-your-clients
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
Persona’s policy is "The images obtained from government identification document and photos of your face that you upload, and data from scans of facial geometry extracted from the government identification document and photos of your face that…
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
I have been asking for weeks to be allowed to do a manual review but Headway support is ignoring my request and just telling me that I can choose to opt out and stop being a headway customer.
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
Opting out is possible according to their policy which states "Inform each User in writing of the manner in which the User may opt out of the collection, processing, storage or usage of their Biometric Data"
https://headway.co/legal/biometric-data-policy
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
Headway support said they will keep the data for 6-7 years.
“Your information from the ID verification (IDV) process is securely stored within Headway and will not be shared. This process is required to confirm your identity and follow federal privacy laws, with data kept for about 6–7 years before deletion.”
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
From their privacy policy: “Subject to the customer’s retention period, Persona will permanently destroy ID and Selfie Scan Data upon completion of identity verification services or within three years of your last interaction with Persona, consistent with the customer’s instructions unless Persona is otherwise required by law or legal process to retain the data.”
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
You can request your data be deleted, however it will have already been sent to Headway, various third party providers, and the government. Persona can wait three years after your deletion request to actually delete it, or maybe longer if they are required by law to retain it. If you interact with persona it resets that clock.
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
Persona also shares your information with many other companies, including OpenAI and Anthropic for “Data Extraction and Analysis”
https://withpersona.com/legal/subprocessors
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
Talk to your state representatives and governor. New bills could be written or existing bills could be strengthened to force companies like Headway to provide alternatives to online biometric scanning. Governors could write an executive order.
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
In NJ for example this bill would require consent, which is not enough as Headway is happy to lose customers who don’t want to give consent. If it is strengthened to require the option of a manual review with your provider or a Headway employee over teleconference, similar to showing your ID when you physically go to a doctor, that would be great.
https://trackbill.com/bill/new-jersey-assembly-bill-1419-prohibits-acquisition-or-disclosure-of-certain-personal-health-information-without-consent/2796330/
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
@morrick I’ve been using Peaks to reorganize my day and it has helped a lot.
https://apps.apple.com/app/id6446705377
Replying to
@mattcomi@hachyderm.io well there is about 75 years between these photos so the rate it is rising is actually pretty slow.
Replying to
You can talk to your provider and see if they are on any alternative platforms to Headway that you can switch to so you can keep seeing them.
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
@JSCybersec@infosec.exchange it had been *months* since a breach happened with this exact company. Ancient history!
Replying to
…you upload, are collected, used and stored directly by Persona on behalf of Customer as Customer’s service provider through Customer’s website or app that you accessed."
https://withpersona.com/legal/privacy-policy/
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
However in talking to Headway support many times over the past few weeks to try to opt out they eventually told me I can opt out by not using Headway, which means there is not actually an opt out.
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
@mjtsai I don’t actually see them. If they are hidden or not actually in Passwords app I don’t know.
Replying to
@sixcolors Stolen Device Protection will require that you erase and restore your phone to be able to regain full access to it should FaceID fail to recognize you (surgery, injury, shaving a beard, broken eye glasses, etc…)
It is discussed further here https://mjtsai.com/blog/2024/07/31/ios-17-6-and-ipados-17-6/
Also some devices are not getting it enabled with 26.4—it didn’t happen on my phone.
@glennf
Replying to
@dxzdb @MrRooni during the setup when you are prompted to sign into iCloud there should be a small “set up later” that you can click to skip it and then once you’re fully logged in you can open System Settings and sign into it then.
By activated you mean created? It is auto created when updating to iOS / iPadOS 17 or macOS Sonoma.
Replying to
Replying to
Replying to
@martinvermeer@fediscience.org @zackwhittaker@mastodon.social @thomasgermain@journa.host @swodinsky@mastodon.social Receipts from my Twitter archive, which is of course reverse chronological and separated out from the thread it was in.
https://imgur.com/a/mDWSeDp
Replying to
@martinvermeer@fediscience.org @zackwhittaker@mastodon.social @thomasgermain@journa.host @swodinsky@mastodon.social I just did a test and it does infact backup to iCloud. The promised opt in to iCloud seems to have still not materialized.
Yes there are mitigations such as ADP or excluding it from iCloud backup but the average user cannot be expected to figure that out, and they don’t even tell you that this is an issue.
Replying to
Persona retains your information for a minimum of 6 years!
“It’s also important to note that in each of the cases discussed below, covered entities are required to retain records of all PHI disclosures for a minimum of six years. This includes retaining a record of any information collected as a part of the verification process, as well as copies of any documents or photos collected.”
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
Illinois probably has the strongest law on the books.
https://legalclarity.org/illinois-biometric-privacy-act-key-provisions-and-updates/
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
@rmondello@hachyderm.io @ultranurd@tacobelllabs.net if you have a passkey, you likely still have a password for that site. Even if you aren’t using the password it exists as an authentication method and the TOTP second factor does provide it more protection. The website could leak passwords in a breach for example.
Sometimes you can have a password less account that only uses a passkey but it is rare that it is offered that way so far.
Replying to
Massachusetts has a bill that requires an opt out but it doesn’t apply to health care.
https://malegislature.gov/Bills/194/H96
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
Replying to
@signalapp the same bug has been on macOS for at least eight years. https://www.macrumors.com/2018/05/09/signals-messages-mac-notification-center/
Replying to
Replying to
The URL in the post above is not linked from their current privacy policy which seems to be more vague than it was in the past.
Current: https://withpersona.com/legal/privacy-policy/
The link was found on the April 7, 2026 version of that page: https://web.archive.org/web/20260407123739/https://withpersona.com/legal/privacy-policy
#autism #privacy #identityverification #ageverification #mentalhealth #persona #IDverification #biometricdata
Replying to
Replying to
@martinvermeer@fediscience.org @zackwhittaker@mastodon.social @thomasgermain@journa.host @swodinsky@mastodon.social
I’ve been pointing out since 2022 that Euki stores data in iCloud. I extensively documented this on Twitter but have since deleted my account. They don’t store it on their servers, but it backs up to iCloud so your period data is still accessible to law enforcement.
https://mastodon.social/@ridogi/113896127807404486