The Wellbeing Portal That Isn’t a Clinic: Reading the Terms of an Employer-Provided Mental Health App

A banner on the intranet announces a new mental health app, free at the point of use and available to all staff. It promises guided self-help, mood tracking and someone to talk to. For an employee with a long commute and a full inbox, the appeal is obvious. Yet the wording of such offers often glides over a important distinction: a workplace wellbeing tool is not the same thing as confidential clinical care, and the terms attached to it deserve as much attention as the breathing exercises.

What these tools actually are

Most employer-provided digital mental health products combine several elements: structured CBT-style modules, mood or sleep tracking, signposting to external services, and sometimes text-based support with a coach or counsellor. Some are designed for mild to moderate difficulty and are intended to be used independently. Others act as a triage route into further support, including telephone or video sessions.

The evidence base is mixed. Some guided self-help programmes have shown benefit for mild anxiety and low mood in trials, particularly when users are supported rather than left entirely alone. But studies vary in quality, engagement is often low, and many commercial evaluations rely on before-and-after scores rather than controlled comparisons. A polished interface and a high app-store rating are not, by themselves, evidence of clinical effectiveness. Nor does an employer’s decision to purchase a product mean it has been assessed against NHS standards or recommended by NICE as a substitute for treatment.

The practical implication is not cynicism. It is calibration. A well-designed app may help someone notice patterns, learn a technique or take a first step. It is a poor place to manage severe depression, escalating anxiety, trauma, psychosis or suicidal thoughts. Those situations require a GP, NHS services or emergency help, not a dashboard.

The boundary between wellbeing and clinical care

Workplace wellbeing provision tends to operate at population level. It is designed to be available to everyone, to avoid stigma and to support people who may not yet see themselves as unwell. Clinical care operates at an individual level. It involves assessment, a named practitioner, a record, supervision and clear arrangements for risk.

When an app offers access to a therapist, ask who that person is and what they are qualified to do. In the UK, relevant registers include the BACP, UKCP, HCPC and GMC, depending on the profession. Ask whether the service has clinical governance, supervision and a complaints route. If the product claims to diagnose or treat a condition, it may fall within medical device regulation; that is a question for the provider and, where relevant, the MHRA. If the app is simply a self-help resource, it should say so plainly.

A useful rule of thumb is this: if you would not accept the same standard from a high-street clinic, do not accept it merely because the service is reached through a familiar intranet page.

Who sees what: the privacy questions to ask

Under the UK GDPR and the Data Protection Act 2018, health information is special category data. Its processing requires a lawful condition and additional safeguards. In many employer arrangements, the employer is the data controller for its own wellbeing scheme, while the app provider acts as a processor. But responsibility can be shared or differently allocated, and the employee privacy notice should make this clear.

Before using the service, look for answers to the following questions. If they are not readily available, ask HR, your union or staff representative.

• Is participation genuinely voluntary, and will non-use affect performance reviews, promotion or sickness procedures?
• What information does the employer receive? Aggregate dashboards are one thing; individual usage logs, mood scores or chat transcripts are another. If data are aggregated, what is the minimum cohort size before figures are shown?
• Can line managers see who has signed up, logged in or completed modules?
• How long are records kept, and how can you request deletion?
• Which subcontractors process the data, and are any transfers made outside the UK?
• What happens if the app’s risk-detection system flags a concerning entry? Who is contacted, with what consent, and according to what safeguarding policy?
• Are chatbot interactions reviewed by a human, and are users told when they are talking to automated systems?
• Is the service kept separate from occupational health and personnel files?

A data protection impact assessment is often required for large-scale processing of health data. Employees can reasonably ask whether one has been completed and whether staff representatives were consulted. The right of access also applies: you can ask what personal data an organisation holds about you.

Using the tool without confusing it with care

If you decide to use an employer-provided app, treat it as a low-intensity resource rather than a confidential clinic. Set a modest goal, such as completing one module a week or tracking sleep for a fortnight, and review whether it is helping. Avoid entering detailed clinical information unless you are satisfied with the privacy terms. If you are using the app while waiting for NHS Talking Therapies, keep the two separate and tell your GP about any significant change in symptoms.

If distress is persistent, worsening or affecting work and daily life, speak to a GP. In a crisis, contact NHS 111 and select the mental health option where available, call 999, or contact Samaritans on 116 123. An employer wellbeing portal is not an emergency service.

What good employer provision looks like

Employers should present these tools honestly: as an adjunct to, not a replacement for, decent management, reasonable adjustments, occupational health and NHS care. They should publish a clear privacy notice, complete a data protection impact assessment, consult staff representatives and avoid using app uptake as a proxy for wellbeing. Uptake tells you who clicked; it does not tell you who was helped.

Digital tools can lower the threshold for seeking help, and that is worth something. But the intranet banner should not be mistaken for a clinic door. Read the terms, ask who sees the data, and keep clinical care in clinical hands.