How safe is my data in online counseling?

Online counseling about cannabis is only a good option if you can judge how well your data is protected. According to the platform, messages at DigiSucht are end-to-end encrypted. The mindzone offer describes its connection as SSL-encrypted. How safe your data ultimately is, however, also depends on what you yourself disclose.

Encryption: what the terms mean

SSL is an encryption of the connection between your device and the server. It prevents third parties from reading along during transmission. End-to-end encryption goes a step further. In that case, only the people involved can read the content, that is, you and the counselor.

For you, this means: look for an encrypted connection, recognizable by an address that begins with https. If a provider says nothing about encryption, take your time before you write anything personal there.

Anonymity and registration details

At DigiSucht, counseling is anonymous on request. The username can be chosen freely, and an email address is optional. mindzone also describes its online counseling as anonymous, and no email address is needed there for contact.

In the free-text field, avoid details that could identify you, such as place of residence, school, employer or names of people from your surroundings. This applies especially when you talk about family or friends. General wording is often enough to start with.

Deleting and sharing entries

You can delete your DigiSucht account yourself. According to the platform, final deletion takes place within 48 hours and cannot be undone after that. If you want to keep notes or entries, back them up on your own device beforehand.

The platform also states that you decide yourself whether entries in the tools are shared with the counselor. In addition, the counselor cannot see whether you are online.

Checking before you register

Before you register, a brief check is worthwhile. Who runs the offer? Is there a legal notice and a privacy policy? At DigiSucht, the footer links to both. It is also worth looking at the privacy notice at mindzone before you write anything personal.

Also prepare one question: what does the counselor need to know so that they can help you? You do not have to write anything beyond that. Counseling should help you make sense of your situation.

Data security on your device

If you share a device with others, log out after each session and close the browser. Do not use a device that is openly accessible to other people when you write about personal topics. This caution costs little and protects your privacy.

Anonymity has limits

With the offers mentioned, you do not have to give your real name. Anonymity mainly means that your name does not appear in the conversation. The connection to the offer still runs through technology, namely through your device, your browser and your network. If you want to be especially careful, use a device that belongs only to you, and log out after each session.

This caution adds to the anonymity of the offer. It does not replace it. How the offer itself handles data is set out in its privacy policy. That is exactly where it is worth looking before you register.

Questions for the provider before you register

• Who runs the offer, and is there a legal notice with an address on the site?
• Which details are required for registration, and which are optional?
• How long are messages stored, and who can view them?
• Does end-to-end encryption also apply to video calls, and where is that stated?
• How do I delete my account, and what happens to my entries in the process?

Telling transport encryption and end-to-end encryption apart

Two terms are often used interchangeably but mean different things. Transport encryption protects the connection between your device and the server, so that third parties cannot read along on the way. End-to-end encryption goes further: only the people involved can read the content.

An offer can have an encrypted connection and still not use end-to-end encryption. The connection is recognizable by an address that begins with https. Whether messages are protected end to end is stated in the provider's explanation and must be clearly named there.

What is really needed in the free text

For a first assessment, counseling rarely needs names, addresses or the employer. Instead, describe what is burdening you, since when it has been this way and what you have already tried. That is usually enough for a first assessment.

If you write about other people, the details also concern them. Mention only what is necessary for your concern.

Shared devices and notifications

If you share a device with others, log out after each session and close the browser. Switch off message previews if housemates can see the screen. Delete downloads you no longer need. These steps cost little and reduce the risk that others read along.

Backing up your entries before you delete

When you delete the account, the entries are no longer available afterwards. Back up notes you want to keep on your own device beforehand. A copy of your conversation notes also helps if you later go to another counseling service. Relatives have their own offers, such as counseling for relatives about cannabis.

Logging out and deleting are separate steps

Logging out ends the current session, and nothing more. Whether your data stays stored after that is stated in the provider's privacy policy. Look there before you use the account, and ask if anything is unclear.

Deleting the account is a separate step. If you want to be sure, delete the account explicitly and then check whether your name or email address is still visible.

What you can do now

• Check the provider's privacy policy and legal notice before you register.
• Choose a username that does not identify you.
• Share only the details in the free text that the counseling needs for your concern.
• If needed, read the article Is there video counseling for addiction problems? about the technology behind video calls.