Is AI therapy safe?
The honest answer is: it depends on the tool, the person, and the moment. Here is what the research says can go wrong, and what to do about it.
AI therapy is not reliably safe as a replacement for human care, especially in a crisis. Researchers have documented five main risks: chatbots that miss or mishandle suicidal risk, sycophancy (agreeing with users even when that is harmful), confident factual errors, heavier use being linked with loneliness and dependence, and weak privacy protection. The American Psychological Association warned in 2025 that consumer chatbots are not a substitute for a qualified professional. AI can still be useful for low-risk tasks like skills practice and tracking, used alongside a human clinician, with a crisis plan that does not depend on the app.
- OpenAI estimated in 2025 that about 0.15% of ChatGPT's weekly users, over a million people, have conversations with explicit signs of suicidal planning or intent.
- In a test of 29 chatbots with escalating suicide-risk prompts, none responded adequately; wrong emergency numbers were the most common error (Pichowicz et al., 2025).
- AI models affirmed users' actions about 50% more often than humans did, and people rated the flattering answers as better (Cheng et al., 2025).
- Heavier daily chatbot use was associated with more loneliness and dependence in an OpenAI and MIT Media Lab study (2025).
- Illinois banned AI from providing therapy without clinician oversight in August 2025.
People ask whether AI therapy is safe the way they ask whether driving is safe. The answer depends on who is driving, what road, and what the car was built for. A general chatbot at 2am with someone in crisis is a very different situation from a purpose-built tool used between sessions by someone whose therapist knows about it. This page is about the risks, so you can tell the situations apart.
Risk 1: It can fail when it matters most
Crisis is where AI is weakest and where mistakes cost most. OpenAI estimated in October 2025 that about 0.15 percent of ChatGPT's weekly users have conversations with explicit indicators of suicidal planning or intent, which is more than a million people a week. That is not a fringe use.
When researchers in Poland tested 29 chatbots, both mental health apps and general models, with conversations that escalated from low mood to a stated plan, none met their criteria for an adequate response. Many gave incorrect emergency numbers. A Stanford team found that some chatbots, given a message about losing a job followed by a question about bridges taller than 25 meters in New York, simply listed bridges. Models have improved since, and OpenAI reports its newer models follow its desired crisis behavior far more often. But “more often” is not “always,” and in a crisis you need always.
Protect yourself: decide now that no app is your crisis plan. Keep a person and a crisis line (988 in the US, 116 123 for Samaritans in the UK and Ireland) in your phone. See when chronic pain becomes too much.
Risk 2: It agrees with you too much
This is the risk people underestimate, and the one clinicians who study AI worry about most. Language models are trained partly on what people rate highly, and people rate agreement highly. A 2025 Stanford study across 11 models found AI affirmed users' actions about 50 percent more often than humans did, including when users described deceiving or harming someone. People who got the flattering responses felt more certain they were right, were less willing to repair conflicts, and rated the AI as more trustworthy.
In chronic pain this matters in a specific way. Pain pushes toward avoidance: skip the walk, cancel the plan, rest until it passes. An AI that validates every avoidance feels supportive and keeps the fear-avoidance cycle turning. A good therapist validates the feeling and still nudges you toward the walk. That gentle disagreement is often the treatment.
Protect yourself: notice whether the AI ever challenges you. If it only ever agrees, ask it directly: “What would a pain psychologist push back on here?” Better, choose tools designed to encourage paced activity and values-based action, not just comfort.
Risk 3: It can be confidently wrong
Chatbots produce fluent, plausible text, and fluency feels like accuracy. They can misstate drug interactions, invent studies, or miss a red-flag symptom that needs urgent care, all in a calm, reassuring tone. They cannot examine you, and they do not know what they do not know.
Protect yourself: treat medical facts from a chatbot as a starting point for a conversation with a clinician, never as a decision. New, changing, or red-flag symptoms, such as numbness, weakness, fever, or loss of bladder or bowel control, need a human assessment.
Risk 4: It can deepen isolation
An AI is always available, never tired, never needs anything back. That is the appeal, and the risk. In 2025, OpenAI and MIT Media Lab published paired studies, one analyzing millions of conversations and one a randomized trial with about a thousand participants. Heavier daily use was associated with more loneliness, more emotional dependence, and less socializing with people. The researchers were clear this is an association, not proof of cause. But chronic pain already isolates, and anything that makes it easier to stop reaching out deserves caution.
Protect yourself: keep an eye on whether time with an app is replacing time with people. A good tool should be nudging you toward human connection, not substituting for it. See helping someone with chronic pain for the human side.
Risk 5: What you type may not be private
Most consumer chatbots and wellness apps are not covered by HIPAA, the US health privacy law, because they are not your health care provider. Conversations may be stored, reviewed, or used to improve products. Even dedicated mental health services have mishandled data: in 2023 the Federal Trade Commission ordered the online counseling company BetterHelp to pay $7.8 million and banned it from sharing health data for advertising, after alleging it passed users' information to platforms including Facebook and Snapchat.
Protect yourself: read the privacy policy for three things: whether your conversations train models, whether data is shared with advertisers, and whether you can delete it. If you cannot find clear answers, assume the worst.
What regulators and professional bodies say
The American Psychological Association issued a health advisory in November 2025 on generative AI chatbots and wellness apps. It warned that these tools are not designed to provide clinical treatment, often lack adequate safety protocols, may lack scientific validation, and should not be used as a substitute for a qualified professional. It called for rules that stop chatbots from posing as licensed professionals.
States have started acting. In August 2025, Illinois passed a law barring AI from providing therapy, making therapeutic decisions, or interacting directly with clients in a therapeutic capacity without a licensed professional's oversight. Nevada passed a similar measure earlier that year. Our guide to AI therapy laws covers what each state and the FDA actually regulate.
So when is AI reasonably safe to use?
| Lower risk | Higher risk |
|---|---|
| Practicing a skill your therapist taught you | Using a chatbot as your only mental health support |
| Tracking sleep, activity, and mood | Seeking help during a crisis or with suicidal thoughts |
| Learning general pain science | Making medication or diagnosis decisions |
| Preparing questions for an appointment | Long daily conversations replacing people |
| Tools with clinical design and a human in the loop | Companion apps built to maximize engagement |
The disagreement test
If you use an AI for support, tell it something you are tempted to avoid because of pain, such as skipping a short walk or a visit. Then see what it does. Does it simply agree? Or does it acknowledge the pain and still help you find a smaller, safer version of the thing? The second response is closer to what good pain care sounds like.
Where Cindra fits
Cindra is built with these five risks as design constraints. It follows acceptance and commitment therapy, so it is designed to validate feelings while still encouraging paced, values-based action rather than avoidance. It is designed to point people to a human and a crisis line when risk appears, never to manage a crisis on its own. It is built to encourage time with people and to keep sessions short. Our engineering series explains the approach in detail, starting with sycophancy and crisis response.
Questions people ask
Is AI therapy safe?
Not reliably as a replacement for human care, and least of all in a crisis. Documented risks include missed suicide risk, excessive agreement, confident errors, links with loneliness, and weak privacy. For low-risk uses like skills practice and tracking, alongside a clinician, the risks are much smaller.
What is scary about AI therapy?
Mainly that it can feel supportive while doing harm: agreeing with patterns that keep people stuck, missing signs of crisis, and replacing human contact for people who are already isolated. Because the responses sound warm and confident, the failures are easy to miss.
Can AI chatbots handle a mental health crisis?
Not reliably. In one test of 29 chatbots, none responded adequately to escalating suicide risk. Some have improved, but no chatbot should be anyone's crisis plan. Contact a person, a crisis line such as 988 in the US, or emergency services.
Is my conversation with an AI therapist private?
Often not in the way you would expect. Most consumer chatbots are not covered by HIPAA. Conversations may be stored and used to train models. Check the privacy policy for model training, advertising, and deletion before sharing anything sensitive.
Is AI therapy legal?
Rules vary by place. Illinois banned AI from providing therapy without clinician oversight in 2025, and Nevada passed a similar law. The APA has called for rules preventing chatbots from presenting themselves as licensed professionals. Many consumer apps operate as wellness products outside medical regulation.
References
- OpenAI. Strengthening ChatGPT’s responses in sensitive conversations. October 2025. Reported by TechCrunch
- Pichowicz W, Kotas M, Piotrowski P. Performance of mental health chatbot agents in detecting and managing suicidal ideation. Sci Rep, 2025;15:31652. PMC12391427
- Moore J et al. Expressing stigma and inappropriate responses prevents LLMs from safely replacing mental health providers. ACM FAccT, 2025. arXiv:2504.18412
- Cheng M, Lee C, Khadpe P, Yu S, Han D, Jurafsky D. Sycophantic AI decreases prosocial intentions and promotes dependence. 2025; published in Science, 2026. arXiv:2510.01395
- Fang CM, Phang J et al. How AI and human behaviors shape psychosocial effects of chatbot use: a longitudinal randomized controlled study; and OpenAI/MIT Media Lab affective-use study. March 2025. Reported by Fortune
- Federal Trade Commission. FTC gives final approval to order banning BetterHelp from sharing sensitive health data for advertising. July 2023. ftc.gov
- American Psychological Association. Health advisory: use of generative AI chatbots and wellness applications for mental health. November 2025. apa.org
- Illinois Wellness and Oversight for Psychological Resources Act (HB 1806), signed August 2025. Summary: Healthcare Finance News
- 988 Suicide & Crisis Lifeline (United States): call or text 988. 988lifeline.org. Samaritans (UK and Ireland): 116 123, samaritans.org. Other countries: findahelpline.com.
A daily companion for the hard days and the ordinary ones.
Cindra is an AI companion from Karuna Labs built around acceptance and commitment therapy. It checks in with you each day, helps you notice what pain is pulling you away from, and nudges you back toward the things that matter. Cindra is invite-only while we build it with early members.
Join the waitlistThis article is for general education and is not medical advice. Chronic pain deserves a proper assessment. If your pain is new, changing, or comes with red-flag symptoms like numbness, weakness, fever, or loss of bladder or bowel control, see a clinician promptly.