What Survivors Should Know About Data Privacy Before Starting Therapy
A survivor may have canceled three appointments this month, not with a psychologist, just ordinary plans, a haircut, a coffee with a friend, and may have told herself each time that something came up. Nothing came up. Something in her has been running on hypervigilance for longer than she's been willing to name.
Written and clinically reviewed by Dr. Esther Lapite-Garrett, Psy.D., founder of Alafiora. Licensed Psychologist, New Mexico, PSY-2026-0031, issued April 2026. Licensed Psychologist, Indiana, 20044074A, issued March 2026. Credentialed Health Service Psychologist, National Register, #69571, issued 21 April 2026. In supervised clinical practice since 2020, licensed independently since 2026. Doctor of Psychology, Alliant University, San Diego, an APA-accredited program in clinical psychology, 2024. APA-accredited clinical internship, New Mexico State University Counseling Center. Postdoctoral fellowship, 2024 to 2025, spanning clinical, multicultural, and AI-informed practice, with a postdoctoral caseload of more than ninety clients. Practice scope: love obsession and love addiction, compulsive sexual behavior and sex addiction, and sexual trauma, treated as one connected system.
Published 21 August 2026. Last updated 21 August 2026.
This article is about a decision survivors increasingly face that did not exist a decade ago: what happens to a disclosure once it is made, whether that disclosure goes to a licensed psychologist working alone, an app, or an AI system. It is written for the individual reading this who has already gotten as far as knowing they need support and is stuck one step earlier, working out whether it is safe to ask for it, and where. It draws on a federal enforcement case against a major therapy app, published research on sexual arousal during nonconsensual sex, and how this specific practice is built, stated as separate, checkable facts rather than an argument that any one option is better than another.
Every personal account described on this page is fiction. Dr. Lapite-Garrett writes them from her own clinical knowledge and expertise. AI is used to produce early drafts of this language, and she reviews and approves each resulting sentence. The individuals, the histories, and the sequences of events here, including those written as he or she and including any pattern shown escalating over time, are not drawn from any current or former client of this practice, and no client information of any kind was used to make them. No one's trajectory appears on this page. What appears is what these psychological phenomena may look like when they occur.
Quick Answer
The BetterHelp Case, Arousal Nonconcordance, and How This Practice Is Structured
AI tools and therapy apps have a real place, and for some people, one of them is how they first found their way to seeking care at all. Separately, and worth knowing on its own terms: in 2023 the FTC fined the therapy platform BetterHelp $7.8 million for sharing sensitive mental health data, including whether someone was seeking treatment at all, with Facebook, Snapchat, Pinterest, and Criteo for advertising, despite promising users that information would stay private. A separate 2022 investigation found dozens of telehealth startups doing something similar through tracking pixels. Separately again: at Alafiora, no insurer is billed unless a client specifically requests a superbill for their own out-of-network reimbursement, no advertising pixel shares this site's traffic with Meta, an ad network, or any third party for retargeting, and one psychologist is the only person who ever needs to know a client's name. These are three separate, checkable facts, not an argument that any one option is more desirable than another. What a survivor does with them is their own decision to make.
How I Know This
A Federal Case, Published Research on Arousal, and What This Article Does Not Try to Claim
The privacy material comes from a real, adjudicated case, not a general worry. The FTC's enforcement action against BetterHelp, Inc. was finalized in July 2023: the company paid $7.8 million and was permanently banned from sharing consumers' health data for advertising, after the FTC found it disclosed the email addresses of 2 million current and former users to Facebook, the therapy-seeking status of 1.5 million site visitors to Facebook, and the IP and email addresses of roughly 5.6 million former visitors to Snapchat, all while promising users their information would stay private. This is checked directly against the FTC's own press release, linked in the citations below. A separate December 2022 investigation by The Markup, an independent nonprofit newsroom, found the same pattern of tracking-pixel data sharing across dozens of telehealth startups, not just this one company.
The arousal research is precise, and precision matters given how much shame sits on this topic. Chivers and colleagues' 2010 meta-analysis, drawing on 132 studies and a combined 2,505 women and 1,918 men, established that subjective sexual arousal and genital response are only weakly connected in general, a phenomenon researchers call arousal nonconcordance. A 2024 scoping review in Archives of Sexual Behavior confirmed that genital arousal specifically can occur during nonconsensual sex, in both male and female survivors, though the available data could not establish how often. A 2022 qualitative study in the Journal of Gender-Based Violence, analyzing fifty Reddit posts, found this exact pattern directly: survivors who experienced arousal or pleasure during an assault carrying significant shame and self-blame because of it, and distinguishing that physiological response from psychological pleasure and from consent, which are three separate things.
Here is what this article does not try to claim. It does not claim AI tools or therapy apps are unsafe for everyone, or that nobody should use them; several of the sources below are themselves research on how people use AI for mental health support, and that use is treated here as real and often reasonable, not as a mistake. It also does not claim this practice is superior to any other, only that specific, checkable structural facts about how it is built are different from a large platform's, stated plainly enough that anyone deciding can verify them directly.
The licensure numbers above are checkable directly through the state boards and the National Register's own consumer directory.
What This Article Covers
- What wasn't consented to
- What this can look like
- When the body and the story don't match
- Why privacy isn't a preference here, it's the point
- What a solo practice structurally cannot do with a survivor's information
- Where AI and therapy apps do have a real place
- What care actually looks like at Alafiora for a survivor
- How Alafiora is structured
- Questions survivors ask about this
- Citations
What Wasn't Consented To
The Assault Is the First Thing Taken, Not the Only Thing
Nobody asked a survivor whether they wanted the assault to happen. That part is obvious enough that it barely needs saying. What gets said far less often is how much else got taken in the same motion, without anyone asking that either.
A woman may not have consented to the story she started telling herself about it in the weeks after, the one where it was somehow her fault, or her judgment, or something she should have seen coming. She may not have consented to what it did to her career, the promotion she stopped going for because travel meant hotel rooms and hotel rooms meant a specific kind of alone she could not manage. A man may carry the same erosion in a different register: he may not have consented to the assumption that this could not have happened to him, or that he should have been able to physically stop it, an assumption he may have started repeating to himself before anyone else ever said it aloud. Neither of them consented to becoming someone who checks a lock twice, who sits facing the door, who has a reason ready for why tonight is not a good night, again. None of that was a choice. It was cost, extracted without agreement, the same way the assault itself was.
That is worth naming plainly because it reframes what care is actually for: restoring some measure of choice to a life where choice was taken, repeatedly, in ways large and small, for a long time after the event itself ended.
What This Can Look Like
Hypervigilance, Guardedness, and a Life That Quietly Gets Smaller
What this looks like differs from person to person, but for many survivors it can include some combination of the following, offered here as a pattern to recognize rather than a checklist to match against.
A survivor may find she is scanning a room for exits before she is aware she is doing it. She may cancel plans at the last minute, more often than she used to, and may not be fully able to say why beyond a vague sense that going felt like too much. She may find it harder to trust people generally, not only in romantic or sexual contexts, and may notice herself testing people in small ways before she lets them close. She may have let go of things she once built deliberately, a hobby, a friend group, a professional path, not through any single decision to quit but through a slow accumulation of not showing up.
The pattern in men can look different on the surface while carrying the same underlying weight. A man may not describe himself as hypervigilant at all, and may instead notice he has started drinking more before social events, or has quietly stopped dating, or has become someone his friends describe as harder to reach than he used to be. He may throw himself into work in a way that looks like ambition from the outside and functions, underneath it, as a way to never have an unstructured hour alone with his own thoughts. Both versions are the same nervous system doing the same job, protecting against a threat that already happened.
When the Body and the Story Don't Match
Arousal Nonconcordance, and Why It Doesn't Mean What It Feels Like It Means
Some survivors carry a specific, less-discussed weight on top of everything above: a body that responded during the assault in a way that felt like betrayal on its own.
Chivers and colleagues' 2010 meta-analysis established something that reframes this entirely: subjective arousal, what a person feels, and genital arousal, what the body does, are only weakly connected in general, for men and for women, in consensual contexts and not. The 2024 scoping review confirmed the same disconnect specifically during nonconsensual sex. Genital arousal, where it occurs, is a largely automatic physiological response and is not evidence of desire, consent, or enjoyment. A survivor whose body responded is not evidence that any part of her wanted what happened.
The 2022 Reddit-based study found this precise confusion showing up again and again: survivors describing shame specifically because a physiological response felt to them like it must have meant something. For men specifically, this carries an added layer: an erection is frequently treated, by others and sometimes by a survivor himself, as proof of consent or even enjoyment, when it is the same automatic physiological response the research above describes, no more chosen than any other reflex. Neither pattern is a sign anything is wrong with a survivor's healing.
Call or text 988, the Suicide and Crisis Lifeline, if reading this has taken you somewhere hard. It answers calls and texts around the clock, and you do not have to be in immediate danger to use it. If you or someone with you is in immediate physical danger, call 911. A fuller list of lines and services is on Alafiora's crisis resources page. Reading something like this at the wrong hour is a real thing, and stepping away from it is always available to you.
Why Privacy Isn't a Preference Here, It's the Point
The BetterHelp Case, and What It Changed About What "Private" Actually Means
For a survivor deciding whether to say any of this out loud to anyone, "this stays private" has to mean something specific and checkable, not just a promise on a landing page.
In March 2023 the FTC brought an enforcement action against BetterHelp, Inc. for sharing users' sensitive health data, including whether someone had sought mental health treatment at all, with Facebook, Snapchat, Pinterest, and Criteo, for advertising purposes, despite years of assuring users that information would stay between them and their counselor. The company paid $7.8 million and was permanently banned from that practice, in a case the FTC itself described as the first of its kind to return funds directly to consumers whose health data was compromised. A separate December 2022 investigation by The Markup found the same tracking-pixel pattern across dozens of other telehealth startups.
None of that means every app or platform does this, or that survivors who found real help through one made a mistake. It means "private" is a claim that can be checked against what a company actually does with data, not just what it says it does, and for a survivor specifically, that distinction can be the difference between getting help and staying silent for another year.
What a Solo Practice Structurally Cannot Do With a Survivor's Information
One Psychologist, No Insurer
Alafiora is built in a way that makes several of the exposures above structurally unlikely, not merely against policy.
No insurer is billed by default, so there is no diagnosis code, no claim, and no explanation of benefits generated for this practice unless a client specifically chooses to request a superbill for their own out-of-network reimbursement, entirely on their own terms. Nothing is submitted anywhere for advertising or marketing purposes, and no advertising pixel on this site shares data with Meta, an ad network, or any third party for retargeting. Dr. Lapite-Garrett is the sole practitioner, so the number of people who ever need to know a client's name to make care happen is one. Where clinical consultation happens, it is de-identified: what gets discussed is a general approach to a kind of presentation, not a name, a face, or details specific enough to identify a particular person.
None of this is a claim that this structure is better for every survivor. It is a claim that it is checkable, specific, and different in kind from what a large platform with thousands of active users and a marketing budget is built to do.
Where AI and Therapy Apps Do Have a Real Place
What This Article Isn't Arguing
This is not an argument that AI or therapy apps are the wrong choice. For a lot of people, including some who eventually find their way here, they are a genuine first step, sometimes the only accessible one, into thinking or talking about something they have never said out loud before.
A 2026 nationally representative survey published in JAMA Pediatrics found that among young people who had used AI chatbots for mental health support, most rated the experience as helpful, and use was actually more common among those already in some form of care, not a replacement for it. A separate 2025 analysis of Reddit discourse found people describing real value in constant availability and a perceived absence of judgment. Those are real benefits, and dismissing them would not be honest.
What this article covers is narrower: what happened in one federal case, what the arousal research actually shows, and how this specific practice is structured, so that whoever is deciding where to bring a disclosure this significant has the checkable facts in front of them.
What Care Actually Looks Like at Alafiora for a Survivor
Depth-Oriented, Trauma-Focused, and Built Around One Relationship
The first sessions focus on establishing a working sense of safety before any specific account of what happened is asked for, at whatever pace that actually takes.
Alafiora works from harm reduction and consent-oriented practice, which here means a survivor is never asked to perform readiness, produce a polished narrative, or prove the severity of what happened as a condition of being helped. Betrayal trauma, developmental trauma, and complex trauma are all part of how this practice understands sexual trauma, since an assault rarely arrives in a life with no history behind it, and the work follows whatever that specific history actually is, not a fixed protocol applied the same way to everyone.
One psychologist holds the whole of this. There is no case handoff, no intake coordinator who takes a history and passes it on, and no rotating associate covering a session. The person who hears something in an early session is the same person still holding it months later.
How Alafiora Is Structured
A Solo, Private-Pay Practice in Three Connected Areas
Dr. Esther Lapite-Garrett is the licensed psychologist who founded Alafiora and the only clinician in it. She holds licenses in New Mexico and Indiana. Both licenses are regular and active, and a license in each state is what allows a session with a resident of that state to happen at all.
The practice treats three areas as one connected system: sexual trauma, including developmental trauma, complex trauma, CPTSD, and betrayal trauma; compulsive sexual behavior and sex addiction; and love obsession and love addiction, including limerence and relational dependency. Clients are individuals sixteen and older, with guardian co-signature required at ages sixteen and seventeen.
Every client works with Dr. Lapite-Garrett directly, throughout care, with no rotating associates and no case handoffs. Sessions run in four formats: a clinical intake of eighty minutes, a standard session of fifty minutes, an extended session of a hundred and ten minutes for material that does not fit inside an hour, and a twenty-five-minute clarity session. Care is delivered by video on a HIPAA-compliant platform covered by a signed business associate agreement, on location, and through walk and talk sessions where that format suits the work. Full session formats and current rates are detailed on the practice's fee page.
The practice is private pay, sometimes called direct pay, cash pay, or out-of-pocket. No diagnosis reaches any insurer or third party unless a client authorizes or requests it, and no utilization reviewer decides how many sessions are warranted. A superbill for potential out-of-network reimbursement is available on request.
Questions Survivors Ask About This
Is It Wrong to Have Used an App or AI Before Coming Here?
Not at all. A number of survivors first put words to what happened in a chatbot conversation or an app, and that is treated as a real, legitimate first step, not something to apologize for. What changes here is what happens to that disclosure once it is made.
Does This Mean Every Therapy App Shares Data the Way BetterHelp Did?
Not necessarily, and this article does not claim that. The FTC's case against BetterHelp is a documented, specific finding about one company's practices between 2013 and 2020. It is evidence that this kind of risk is real and has actually happened, not proof that every platform behaves the same way.
What If I'm Not Sure I Was "Traumatized Enough" to Need This?
There is no threshold that has to be met first. Trauma does not manifest the same way in every person, and a response that feels smaller or more confusing than what is expected is not a sign that care is not warranted.
I Felt Something Physical During the Assault. Does That Change What Happened?
Not in the way it often feels like it might. Genital arousal during nonconsensual sex is a documented, largely automatic physiological response, not evidence of desire or consent. What happened is still what happened, regardless of what a body did on its own.
How Is My Information Actually Kept Private Here?
No insurer is billed by default, no diagnosis is shared with a third party unless a client requests it, no advertising pixel shares data with an ad network, and one psychologist is the only person who ever needs to know a client's name. These are structural facts about how the practice is built, checkable directly rather than taken on faith.
Does Alafiora Work With Survivors Who Are Still Processing Whether to Report?
Yes. Whether or how to report is the survivor's decision, on the survivor's timeline, and care here is not contingent on having made that decision first.
Citations
Chivers, M. L., Seto, M. C., Lalumière, M. L., Laan, E., & Grimbos, T. (2010). Agreement of self-reported and genital measures of sexual arousal in men and women: A meta-analysis. *Archives of Sexual Behavior, 39*(1), 5–56. https://doi.org/10.1007/s10508-009-9556-9
Federal Trade Commission. (2023, July). FTC gives final approval to order banning BetterHelp from sharing sensitive health data for advertising, requiring it to pay $7.8 million [Press release]. https://www.ftc.gov/news-events/news/press-releases/2023/07/ftc-gives-final-approval-order-banning-betterhelp-sharing-sensitive-health-data-advertising
Feathers, T., Palmer, K., & Fondrie-Teitler, S. (2022, December 13). Out of control: Dozens of telehealth startups sent sensitive health information to big tech companies. The Markup. https://themarkup.org/pixel-hunt/2022/12/13/out-of-control-dozens-of-telehealth-startups-sent-sensitive-health-information-to-big-tech-companies
Luo, X., Ghosh, S., Tilley, J. L., Besada, P., Wang, J., & Xiang, Y. (2025). "Shaping ChatGPT into my digital therapist": A thematic analysis of social media discourse on using generative artificial intelligence for mental health. Digital Health, 11, Article 20552076251351088. https://doi.org/10.1177/20552076251351088
McBain, R. K., Cantor, J. H., Breslau, J., et al. (2026). AI chatbot use and disclosure for mental health among US adolescents and young adults. *JAMA Pediatrics, 180*(8), 884–890. https://doi.org/10.1001/jamapediatrics.2026.2015
Shin, H. J., & Salter, M. (2022). Betrayed by my body: Survivor experiences of sexual arousal and psychological pleasure during sexual violence. *Journal of Gender-Based Violence, 6*(3), 581–595. https://doi.org/10.1332/239868021X16430290699192
Vandervoort, M., Liosatos, A., Aladhami, H., Suschinsky, K. D., & Lalumière, M. L. (2024). Victim sexual arousal during nonconsensual sex: A scoping review. *Archives of Sexual Behavior, 53*(6), 2305–2318. https://doi.org/10.1007/s10508-024-02852-2
Cite this article. Lapite-Garrett, E. (2026). What survivors should know about data privacy before starting therapy: The BetterHelp case, arousal nonconcordance research, and how this practice is structured. Alafiora LLC. https://www.alafiora.com/data-privacy-for-survivors-before-therapy
Report a correction. Alafiora corrects errors of fact on this site. Anything inaccurate on this page can be reported through the compliance contact form, and corrections are made to the page itself with the change noted.
Clinically reviewed by Dr. Esther Lapite-Garrett, Psy.D., licensed psychologist, and read again each year as part of Alafiora's annual copy review.
Related reading on this site. How this practice protects a client's discretion and privacy at a structural level is covered in full on who finds out someone is in therapy. What consent-oriented care actually looks like inside a session is on consent-oriented care. Why harm from a depended-upon person works differently from harm by a stranger is the subject of betrayal trauma. What a client can see of their own record is covered on can I see my therapist's notes. Data privacy considerations specific to sex work, including AI chat log discoverability in real court cases, are the subject of the second installment in this series.
Begin a Confidential Conversation
None of this has to be worked out alone, and none of it has to be decided before a first conversation. A first conversation is held in confidence, within the legal and professional limits of confidentiality any licensed psychologist explains before clinical work begins. The consultation is a brief conversation, by video or phone, where a prospective client can ask whatever they need to, including anything about privacy or structure covered above, and Dr. Lapite-Garrett explains how the practice runs. Those already certain they are ready are equally welcome to begin directly with a first session.
For anyone not ready to reach out today, the page on who finds out someone is in therapy goes further into exactly how privacy is protected here. This article can always be bookmarked, or the QR code in the footer scanned, to keep this practice's information close until the timing feels right.
© Alafiora LLC 2026
Every session at Alafiora is held by one licensed psychologist
Dr. Esther Lapite-Garrett is the founder and sole practitioner of Alafiora. There are no associates, no rotating providers, and no case handoffs: the person who reads a client's history in the first session is the same person still holding it two years later. She is licensed in New Mexico and Indiana. Both licenses are regular and active, and additional state licensure is underway.
Her training is doctoral-level, which typically extends several years beyond a master's-level license in assessment, diagnosis, and the treatment of complex, overlapping presentations. She keeps a deliberately small caseload so that depth is possible, participates in ongoing peer consultation and clinical training, and maintains her own personal therapy.
Whatever brought someone to this page today is never put on trial here
A consultation is a brief conversation with no obligation attached. Those already certain they are ready are equally welcome to begin directly with a first session.