# Is M-Pesa payment data sensitive when it comes from a mental health clinic?

URL: https://tymirahealth.com/resources/faqs/is-m-pesa-payment-data-sensitive-when-it-comes-from-a-mental-health-clinic
For: Finance | Data protection and privacy | Reviewed by Independent clinical reviewer, Registered mental health clinician, Kenya | Last reviewed 8 November 2026

**Answer:** Treat it as such. M-Pesa confirmations include the payer's phone number and name, which are personal data. Linked to a mental health provider, a payment record can reveal that someone receives care, and health status is sensitive personal data under the Data Protection Act. Restrict who can see payment statements, avoid putting diagnoses or service descriptions in account references, keep data only as long as your retention schedule allows, and make sure any integrator handling callbacks has a data processing contract.

Sources: Kenya Law: https://new.kenyalaw.org/akn/ke/act/2019/24 - Office of the Data Protection Commissioner: https://www.odpc.go.ke/faqs - Safaricom: https://developer.safaricom.co.ke/faqs

## Related questions

- [How can we invoice employers for EAP or corporate counselling without revealing who attended?](https://tymirahealth.com/resources/faqs/how-can-we-invoice-employers-for-eap-or-corporate-counselling-without-revealing-who-attended)
- [Should billing staff be able to see clinical notes?](https://tymirahealth.com/resources/faqs/should-billing-staff-be-able-to-see-clinical-notes)
- [Can a teenager use our digital mental health service without parental consent for data processing?](https://tymirahealth.com/resources/faqs/can-a-teenager-use-our-digital-mental-health-service-without-parental-consent-for-data-processin)

---

**About Tymira Health:** Tymira Health is a healthcare technology company based in Nairobi, Kenya. It builds Tymira360, a practice management and EHR platform for mental health, physiotherapy and dental providers, clinics, hospitals, NGOs and insurers across Africa.

- Book a demo: https://tymirahealth.com/demo
- Contact: https://tymirahealth.com/contact (info@tymirahealth.com)
- All resources: https://tymirahealth.com/resources/all