Privacy Policy

Last updated: September 4, 2026

1. Overview

Review My Therapy (“RMT”, “we”, “us”; formerly Rate My Therapist) operates a directory of therapists and counselors and lets visitors read and submit reviews. This policy explains what information we collect, how we use it, and the choices you have. Session recording and personalised advertising are off until you turn them on using the cookie banner or the controls in Section 8. Until then, product analytics runs only in an anonymous, cookie-free mode that cannot follow you between days or identify you; accepting analytics switches it to the fuller, cookie-based tracking described in Section 2.

2. Information We Collect

  • Account information: when you sign in with Google, we receive your name, email address, and profile picture from your Google account.
  • Content you submit: reviews, ratings, therapist listings, and any text you provide through our forms.
  • Location information:with your browser's permission, we use approximate geolocation to suggest therapists near you. Your coordinates are sent to BigDataCloud, a reverse-geocoding service, to turn them into a city name; we store only that city name. You can decline this and search by location manually.
  • Usage data: pages visited, device/browser type, referring pages, and page performance, collected via Vercel Analytics and Vercel Speed Insights. These are cookieless and only produce aggregate statistics; they cannot follow you between days or between sites.
  • Product analytics: we use PostHog to understand how the site is used, meaning which pages and buttons people interact with, where searches lead, and where people get stuck. Until you accept analytics, PostHog runs in an anonymous, cookie-free mode: no cookie or local storage is set, no session recording, and you cannot be followed from one day to the next. Accepting analytics switches on the fuller, cookie-based tracking described here, including recording anonymised sessions (see Section 7).
  • Anonymous product feedback:the “Feedback” button and the prompt under search results collect a category, an optional message, and the page you were on. These are stored without your name, email, account, or IP address; contact details typed into the message are automatically removed before it is saved.
  • Cookies: we use a small number of essential cookies to keep you signed in, remember your selected location, and remember your cookie choices. Analytics and advertising cookies are only set with your consent. The full list is in Section 8.

3. Therapist Listings & Publicly Available Information

RMT is a directory of licensed mental health professionals. The information shown on a therapist's listing — such as name, practice name, location, contact details, credentials, specialties, and pricing — is compiled from publicly available sources, including state licensing boards, public professional directories, practice websites, and information therapists have published about their services. We also accept listings submitted by members of the public and by therapists themselves.

We do not collect or publish private information about therapists. We never access non-public records, and we do not publish home addresses, personal phone numbers, personal email addresses, or any information that was not already made public in a professional capacity. Publishing a directory of professionals using information they have made publicly available about their practice is lawful, and we take care to keep listings limited to professional details relevant to prospective clients.

Corrections and updates. We want every listing to be accurate. If you are a therapist and any part of your listing is out of date — contact information, pricing, specialties, credentials, location, or anything else — please use the “I'm [your name]” link on your listing or the Feedback page and we will review and update it promptly. We encourage therapists to claim their listing and help us keep it current.

Listing removal. Because listings are built from public professional information and serve people looking for care, we generally do not remove a listing on request alone. We will remove a listing in extenuating circumstances — for example, if you have closed your practice, are no longer licensed or practicing, are not a mental health professional, or have a documented safety concern. See our Help Center for details on how to request a change or removal.

4. How We Use Information

  • To operate and improve the site, including displaying reviews and therapist listings.
  • To authenticate you and associate reviews or votes with your account.
  • To detect abuse, spam, and fraudulent reviews.
  • To show advertising through Google AdSense (see Section 6). Ads are only personalised to you if you consent.
  • With your consent, to measure which features are used and find parts of the site that are confusing or broken.

5. Sharing of Information

We do not sell your personal information. We share data only with service providers that help us run the site (e.g. hosting, authentication, analytics, and advertising providers), and only as needed for them to perform their services, or where required by law. Our providers are located in the United States; where your data is transferred out of your country, we rely on their data processing agreements, including the EU Standard Contractual Clauses where they apply.

6. Advertising & Third-Party Services

We use Google AdSense to display ads. Google and its partners may use cookies and similar technologies to serve and measure ads. Personalised ads, meaning ads based on your prior visits to this and other websites, are only requested if you accept advertising in the cookie banner or in Section 8. Otherwise we ask Google to show non-personalised ads, which still use cookies for basic delivery, frequency capping, and fraud prevention but not to build an interest profile.

If you are in the European Economic Area, the United Kingdom, or Switzerland, Google also shows its own certified consent message for advertising, as its policies require. You can further control ad personalisation across Google's network at Google Ads Settings.

7. Analytics & Session Recording

We use three processors for analytics: Vercel (traffic and performance, cookieless), PostHog (product analytics and session replay, consent only), and Google (AdSense, Section 6). PostHog only starts after you accept analytics. It then stores a random identifier in your browser so that it can group page views into a session; it is not linked to your account, and it is not set at all if you decline or make no choice.

Session replay reconstructs how a page was used — scrolling, clicks, and navigation — so that we can see where the site is confusing. It is configured so that everything you type is masked — the contents of every text box, on every form, are replaced before the recording leaves your browser. On top of that, the review submission form, the claim form, and the text of reviews shown on screen (including a review quoted back to you when you report it) are blocked from recording entirely. We never store the text of what you searched for in analytics.

Event data is retained for up to 12 months and session recordings for 30 days. You can withdraw consent at any time in Section 8; from that moment nothing further is collected, and the identifier stored in your browser is discarded.

8. Cookies & Your Privacy Choices

When you first visit, a banner asks whether you allow analytics and personalised ads. Session recording and personalised ads stay off until you choose; product analytics runs in an anonymous, cookie-free mode until then (see Section 2). “Accept” and “Decline” are one click, and “Manage” brings you here, where you can turn each purpose on or off individually; changes save immediately. Your choice is stored in this browser for 6 months, after which we ask again. You can change it at any time here:

We honour the Global Privacy Control browser signal: if your browser sends it, we treat it as a rejection of analytics and personalised ads without asking, and the control above will say so. We also respect Do Not Track for analytics.

The cookies and similar storage we use:

NamePurposeTypeDuration
authjs.* (session, CSRF, callback)Keeps you signed in and protects sign-in forms.EssentialSession to 30 days
rmt_cityRemembers the location you chose so search results are relevant.Essential30 days
rmt_consentStores the cookie choices you make on this page or in the banner.Essential6 months
ph_*_posthog (and local storage)PostHog: identifier that groups your page views into a session for analytics and session recording. Set only after you accept analytics; until then PostHog runs cookie-free.Analytics, only with consent12 months
Google advertising cookies (e.g. IDE, __gads, __gpi, NID)Google AdSense: ad delivery, frequency capping, fraud prevention and, only with consent, ad personalisation.Advertising, third partyUp to 13 months

Essential cookies are needed for the site to work and do not require consent. Vercel Analytics and Speed Insights use no cookies or persistent identifiers. You can also clear or block cookies in your browser settings; the site keeps working, but you may be signed out.

9. Your Rights

Wherever you live, you can withdraw consent to analytics and personalised ads at any time using Section 8, decline location access in your browser (the site still works without it), sign out from the account menu, and ask us to access, correct, or delete the personal information we hold about you by contacting us through the Feedback page. You may also complain to the privacy regulator where you live.

  • Canada (PIPEDA and Quebec Law 25): tracking technologies that could identify, locate, or profile you are off by default and only activated with your express consent. You can withdraw that consent at any time in Section 8.
  • EEA and United Kingdom (GDPR): we rely on your consent for analytics, session recording, and personalised ads; on our legitimate interests to keep the site secure and detect abuse; and on performing our agreement with you to run your account. You have the rights of access, rectification, erasure, restriction, portability, and objection.
  • India (Digital Personal Data Protection Act, 2023): we process your personal data on the basis of your consent, which you can withdraw at any time in Section 8 or by contacting us. You can ask us to access, correct, or erase your data and to nominate someone to exercise these rights for you. Our providers are outside India, so your data is transferred and stored abroad as described in Section 7. You may raise a grievance with us first and, if unresolved, with the Data Protection Board of India.
  • California (CCPA/CPRA):we do not sell personal information. Personalised advertising may count as “sharing”; you can opt out of it in Section 8 or through the “Your Privacy Choices” link in the footer, and we honour Global Privacy Control signals as an opt-out. We do not discriminate against you for exercising these rights.

10. Children's Privacy

RMT is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above. If we add a new purpose for cookies, the banner will ask for your consent again.

12. Contact

Questions about this policy? Reach out through our Feedback page.