Once COVID-19 hit, the demand for mental health services skyrocketed, and with in-person care suspended, many turned to digital services — which led to a disturbing breach of data privacy.