Most of us would not photocopy our therapy notes and leave them in a café. But most of us do type them into free apps whose business model turns on knowing about us. The outcome is the same; the theatre is different.
This is a plain-English case for why a private therapy journal should live on your phone and nowhere else. Not because you have something to hide, but because of what you have to protect: the unpolished, mid-thought version of yourself — the version a therapist gets to see and almost nobody else does.
What actually happens when you put therapy notes in the cloud
Free and "free tier" apps are running a business. The business is almost never "charge users for the app." The business is attention, data, or both. A Mozilla Foundation 2022 audit of mental-health apps found that a majority of the popular ones shared data with third parties — ads networks, analytics providers, affiliated partners — and many had privacy policies loose enough to drive a truck through.
That does not mean someone is reading your breakup at 2am. It means the text lives on a server you don't control, is backed up in ways you can't audit, is accessible to employees under processes you can't inspect, and is one subpoena or one breach away from belonging to someone else. The risk is small. The downside if it fires is disproportionate.
A reasonable mental model: if a journalist printed your last month of therapy notes on the cover of a newspaper tomorrow, how much of your life would be inconvenienced? For most people, too much. That is the threshold.
The three things the cloud is genuinely good at — and none of them are therapy notes
The cloud is excellent for three things. Sharing, redundancy, and cross-device sync. Therapy notes benefit from none of them.
- Sharing: you do not share therapy notes. That is the whole point.
- Redundancy: you can survive losing a month of therapy notes. You cannot survive a leak. The risk/reward is inverted.
- Sync: you write them in one place — your phone, right after the session. Multi-device is a nice-to-have you do not actually use for this category.
Take away the three upsides and all that remains is the risk. An app that insists on a cloud backend for this particular data is solving a problem you don't have and creating one you didn't ask for.
What a private therapy journal actually looks like
The alternative is not "use paper." Paper is lovely and also gets lost in house moves. The alternative is an app whose architecture matches the sensitivity of the data. A handful of properties to look for:
- The data lives on your device only. No server copy. No account. No sync to anyone else's cloud. If the company vanished tomorrow, your notes would be exactly where they are now.
- No analytics on the content. Crash telemetry is fine; reading what you wrote is not. A decent app tells you plainly, in the privacy policy, what it does and does not see.
- Biometric lock on open. Your therapy notes should be protected by the same mechanism that protects your banking app.
- A real "emergency wipe" option. A one-tap delete-everything in case a device is lost or a relationship goes sideways.
- Export in your format. If you want to move off, you should be able to. Plain text, markdown, or PDF — your data, not theirs to hold.
When we were designing Sesh's private therapy journal, every one of those properties was a design constraint, not a feature. The whole product is built so there is no backend to leak, no account to phish, no analytics dashboard somewhere with a list of your themes. The company does not have the data because the company never receives the data.
But what if my phone dies?
Fair. The honest answer is: accept small, controlled backups — on your terms.
- iCloud device backups are encrypted end-to-end when Advanced Data Protection is on (Settings → iCloud → Advanced Data Protection). Turn it on, and your backup is opaque to Apple. The same logic applies to encrypted Android backups.
- If that is not enough, export a monthly archive to an encrypted disk image you control. That is a ceremony, not a habit — and that is the right cadence for this data.
- Trying to solve "what if my phone dies" by sending raw notes to a third-party cloud is trading a 1-in-100 inconvenience for a 1-in-1000 disaster.
This is the same reasoning we apply to the rest of the Quiet the noise collection — mood logs, breath practice, journaling. Not every product needs a cloud, and the ones that can reasonably avoid it should.
The things a private journal still has to be good at
Privacy is necessary but not sufficient. A private therapy journal that is painful to use gets abandoned by week three, which makes it no better than no journal at all. So the non-negotiables on the usability side:
- Under 90 seconds to log a session. If it takes longer than you spent thinking about the session, you stop.
- Pattern detection that actually works locally. On-device ML has gotten good enough that you don't need a server to surface "you keep bringing up your father on Tuesdays." That insight runs fine on your phone.
- Readable back. You will re-read your log in six months. It should feel like a book, not a spreadsheet.
- Warm language. No clinical jargon. No "patient." No "diagnosis." You are a person with a practice, not a case file.
The difference between a private therapy journal and a clinical tool is tone as much as architecture.
A short checklist before you pick one
Before you trust an app with this, run the checklist:
- Does the privacy policy mention a server, a database, or a "service provider"? If yes, the data leaves your device.
- Does it require an account? If yes, there is a server. See above.
- Does it run ads? If yes, there is an ad network with some form of access.
- Does it offer "AI features" that call an external model? If yes, your notes are going over the wire to be processed by a third party.
- Does it let you leave with your data? If no, you are renting your own thoughts.
None of this is adversarial paranoia. It is hygiene. The same hygiene you apply to your medical records and your passport scans. Therapy is closer to those than it is to a todo list.
Sesh is a private, on-device therapy session journal — no cloud, no accounts, no analytics. Join the waitlist for Sesh →