How Mental Health Apps Are, and Are Not, Regulated

Most mental health apps never pass through any FDA review. Meditation timers, mood trackers, and stress coaches are treated as general wellness products, and the agency chooses not to evaluate whether they do what they say before they land in an app store. An app only enters regulated territory when it claims to diagnose or treat a specific illness. For the vast majority that stop short of that line, deciding whether a tool is worth trusting falls to the people using it and the clinicians advising them.

Key points#

• The FDA classifies most mood, meditation, and stress apps as low-risk general wellness products and applies enforcement discretion, meaning no premarket review.
• An app becomes a regulated medical device only when it claims to diagnose, treat, cure, mitigate, or prevent a disease.
• Enforcement discretion is a published policy for allocating limited review capacity, not a verdict that a product works.
• A 2026 update to the wellness policy chiefly addresses wearables that estimate physiologic signals, not everyday mood and journaling apps.
• The American Psychiatric Association offers a five-level model for appraising an app rather than ranking specific products.

Why claims, not features, set the rules#

Regulators do not sort digital tools by what they contain but by what they promise. The FDA guidance "General Wellness: Policy for Low Risk Devices," first issued in 2016 and revised since, defines a general wellness product by its intended use. It qualifies if it aims to maintain or encourage a general state of health or a healthy activity, or if it links a healthy lifestyle to a reduced risk of, or better living with, certain chronic conditions. It must also be low risk: non-invasive, non-implanted, and free of technology that could harm a user. A breathing coach, a gratitude journal, a mood log, and most stress-management tools sit inside this description without difficulty.

The consequence follows directly. Because a claim like "supports relaxation" or "helps you unwind" stays inside the wellness lane, the FDA declines to hold that product to the standards that govern medical devices. That posture has a name, and understanding it is the whole story.

Enforcement discretion, plainly#

Enforcement discretion means the FDA is exercising a choice about where to spend its attention, not certifying that anything works. When an app lives in the general wellness lane, no reviewer at the agency has confirmed that it reduces anxiety, steadies mood, or improves sleep. There is no premarket submission, no independent look at the underlying science, and no rule requiring the developer to hold evidence for the language on the marketing page. This is why a phrase such as "clinically proven to lower stress" can sit beside a product the agency has never examined. The claim is the developer's, and the wellness framing keeps the whole package outside the device rules.

It helps to name what this is not. Enforcement discretion is not a loophole developers slip through. It is an explicit, published policy that concentrates finite review capacity on higher-risk technology, where a mistake could injure someone. The cost of that sensible triage is that evidence quality in the consumer wellness market is uneven by design, and the appraisal has to happen somewhere downstream.

Where the line gets crossed#

Everything shifts the moment an app claims to diagnose, treat, cure, mitigate, or prevent a specific disease. At that point the software satisfies the statutory definition of a medical device, and it generally needs FDA clearance or authorization before making those claims, most often through the 510(k) or De Novo pathways. A small set of prescription digital therapeutics has completed this process for conditions such as substance use disorder and chronic insomnia. The point of naming that category is only to mark the boundary: those products carry claims that demanded evidence and review, which is exactly what a general wellness app does not.

A 2026 revision to the policy addresses a different edge of the field, the non-invasive wearables that estimate physiologic signals like heart rate variability, blood oxygen, or blood pressure. It broadened the wellness lane for some of these sensors while adding conditions: outputs that imitate clinical measurements need validation, and a device may not flag a reading as abnormal or point toward a diagnostic threshold. For the mental-health-adjacent wearables that infer stress from heart rate patterns, this is meaningful. It does not change the everyday reality that the mood, meditation, and journaling apps most people open still rest on enforcement discretion.

The appraisal that lands on you#

Because the regulator steps back, the burden of judgment moves to clinicians and users. Researchers who have run structured evaluations of popular mental health apps have repeatedly found claims outrunning evidence, thin or missing citations, and privacy practices that swing widely from one product to the next. A stakeholder-informed update to the American Psychiatric Association's evaluation framework, published in Psychiatric Services, grew partly out of this problem. The market turns over faster than any static "best apps" list can keep up with, so the field needed a durable way to ask good questions rather than a ranking that goes stale within months.

A model for judging an app#

The APA does not rate or endorse individual apps. It offers an App Evaluation Model built as a hierarchy of five levels worked through in order: access and background information, then privacy and security, then clinical foundation and evidence, then usability and ease of use, and finally interoperability with the rest of someone's care. The sequence is deliberate. If an app fails an early level, for instance by offering no readable privacy policy or by selling data, there is little reason to weigh how pleasant it is to use.

In practice a handful of questions carry most of the weight:

• Is there a privacy policy, and does it state plainly whether your data is sold or shared?
• Is there peer-reviewed evidence for this specific app, rather than for the general idea behind it, such as cognitive behavioral techniques?
• Who built it, and do they disclose any clinical involvement?
• Can it connect to the rest of your care if you want it to?

None of these require a regulator's stamp, which is just as well, because for most wellness apps that stamp will never arrive.