Institutions struggle to find the line between mental health intervention and privacy issues