While the foundation of professional ethics remains constant—protect patients, maintain confidentiality, avoid harm—the application of those principles in psychiatry is far more complex. That’s because psychiatry isn’t just about diagnosis and medication; it’s about the therapeutic relationship itself, which becomes part of the treatment.

If you accept credit or debit card payments — whether for therapy sessions, copays, or supervision fees — you’re part of the Payment Card Industry (PCI) ecosystem. PCI compliance means following the Payment Card Industry Data Security Standard (PCI DSS) — a set of security requirements designed to protect cardholder data and reduce fraud. These standards apply to everyone who stores, processes, or transmits card information, including small healthcare practices.

The mental health tech boom has promised clinicians simpler credentialing, faster payments, and access to large insurance networks. Companies like Headway, Alma, and Rula (formerly Path) have marketed themselves as friendly practice-building partners. But behind the branding is a reality every provider should understand: these companies are heavily funded by—and increasingly intertwined with—the very insurance giants that control how (and how much) clinicians get paid.