Same Headband, Two Labels: When the Regulatory Category Sets the Evidence Bar

Nov 9, 2026 | Transhuman / Security

A brain-stimulation device sold as a regulated medical device in Europe and a wellness product in the United States shows how the label, not the hardware, decides what a buyer is entitled to know.

The Label Is a Claim

Thirty years in security teaches you one habit above the rest: the label on the box is a claim, not a control. A product that says it is secure has told you what the marketing department wants. A product whose behavior you can inspect has told you something else. I keep applying that habit to a new category that is arriving on people’s heads: consumer brain stimulation.

Last week IEEE Spectrum ran a report on Samphire Neuroscience, a London company that sells a headband delivering low-level electrical current to the scalp, a technique called transcranial direct current stimulation, or tDCS. The device has four electrodes in saline-soaked sponges. The front pair targets a region involved in mood, and the rear pair targets a pain-related region through the motor cortex. Users reportedly run 10 to 30 sessions a month, advised by a phone app and an algorithm.[1]

What caught my attention was not the technology. It was the paperwork.

One Device, Two Identities

In the United Kingdom and the European Union, the device is approved for menstrual pain and premenstrual syndrome. On 5 November the company announced it could also be used there for anxiety symptoms in premenstrual dysphoric disorder, known as PMDD. In the EU it is sold as a medical device called Nettle.[1] In the United States, according to the same report, the same hardware is sold as a wellness device called Lutea, which CEO Emilė Radytė describes as being for conditions that would not be recognized as requiring regulation.[1]

Samphire’s own footer language draws the line plainly. Nettle is a regulated medical device indicated for specific purposes and available only in the UK and EU. Lutea is a general wellness product, it says, that has not been evaluated, approved or cleared by the US Food and Drug Administration and is not intended to treat or cure any disease or condition in the United States.[2]

I am not accusing anyone of breaking a rule. I read nothing in the sources showing that the FDA has taken any action on Lutea, and I am not a lawyer. What I see is a structure, and the structure deserves scrutiny because it is going to be copied.

What the Wellness Door Allows

The FDA’s general wellness policy, reissued on 6 January 2026, describes the category. A general wellness product is intended only for general wellness use and presents low risk. Claims about mental acuity, relaxation or stress management qualify, as do claims addressing a specific body function.[4] But the policy says a product falls outside the category if its labeling, advertising, interface or functionality references specific diseases or clinical conditions, and it treats invasive or higher-risk technology as not low risk. Its own example of something outside the line is a neurostimulation product that claims to improve memory, because of the risks of electrical stimulation.[4]

The guidance does not name tDCS, and the policy is non-binding, so I draw no conclusion about this product from it. I draw one about the category. Electrical stimulation of the brain is the sort of technology that the agency’s own example treats as needing care. Yet the Lutea launch post, published by the company in October 2025, says the device targets regions “involved in emotional regulation, focus, and how you experience pain and fatigue,” helps the brain “maintain balance during hormonal shifts,” and supports neuroplasticity.[2] Those are functional claims about the brain from a company that sells the same hardware as a regulated medical device on the other side of the Atlantic.

The Evidence Underneath

Now the part that should make everyone slow down. The independent trial of the device in PMDD, led by Paul Faulkner at Queen Mary University of London, enrolled 42 participants who used 20-minute daily sessions for two weeks before their period. Its results have been submitted for peer review and are not yet published. According to IEEE Spectrum, depressive symptoms showed no observable difference from sham stimulation, while the frequency of anxiety differed after the first month. Faulkner suggested a strong placebo effect might explain the result. The company says difficulty with emotion regulation improved.[1]

I tried to read the trial registry entry, ISRCTN30702519, and could not; the page was gated behind a script. So everything I know about that study comes through one journalist’s account, and you should weigh it that way. Small trials, unpublished results and ambiguous findings are normal for a young device. They are an awkward foundation for confident claims aimed at a broad consumer market.

Compare the only home-use tDCS device I could confirm the FDA has authorized. Flow Neuroscience’s headset won authorization in late 2025 as a prescription treatment for moderate to severe major depression in adults, supported by a 2024 trial of 174 people. Scientific American reported the agency’s view that the benefit, while modest, outweighed the probable risk.[5] The same article noted a 2023 trial that found tDCS no better than placebo for depression, and an outside expert who called the evidence base mixed.[5] That is what an evidence bar looks like when someone has to clear it. It is not high, and it still exists.

There is one more detail. The Lutea launch post says the product has “No medication, hormones, or side effects.”[2] The independent study described by IEEE Spectrum recorded minor electrode burns.[1] Burns from electrodes may be trivial, and I would not call this deception. It is a reminder that a marketing sentence and a trial record are different documents.

Who Controls the Dose

Here is where my own field starts to matter. According to IEEE Spectrum, an app and an algorithm advise the user on sessions.[1] I could not find any description of how that algorithm decides, what inputs it uses, or whether the user can see and override its recommendations. For a device that applies current to the head, that is the same question I would ask of any system that takes action on a person’s behalf: what is the decision logic, who can inspect it, and what is logged?

The data question is just as pointed. Samphire’s privacy policy, last updated on 31 December 2025, says it collects health and sensitive data that typically relates to menstrual health conditions and daily experiences, entered by users or imported from Apple Health or Google Health Connect.[3] It names a long list of processors, including advertising and analytics partners, and says it will never share health data with advertisers and does not sell it. The same policy’s US section says some non-sensitive health information may be shared with service providers and that some activity may count as sharing for cross-context advertising.[3] I read that as a tension a careful reader should notice, not as proof of misuse. The policy does not describe what, if anything, the headband itself records.

The Reasonable Defense

Fairness demands the other side, and it is a good one. A strict medical pathway is slow and costly. People living with menstrual pain and PMS want options, and a wellness route can put something accessible in their hands quickly. The only side effects reported in the study IEEE describes were minor electrode burns, and the device is approved in the UK and EU for the pain and PMS indications, which is real regulatory review.[1] Placebo response in subjective symptoms is not nothing, and a person who feels better is better. The company’s position is that US conditions would not be recognized as needing regulation.[1]

I take all of that seriously. My objection is narrower. Access is not the same thing as information, and a buyer in Ohio and a buyer in Berlin are entitled to the same truth about what the box does, even if they are not entitled to the same approval status.

Two Devices, Two Labels

Not every company in this space has reached for the cheaper label, and it is worth showing what the alternative looks like. U: The Mind Company, a Cleveland neurotechnology startup, sells both a consumer wellness device and clinical devices. The difference is that it does not sell one device under two labels. It built separate devices.[6]

NeuroEdge is the consumer wellness device. It runs at lower power and voltage, uses its own waveform, and was designed to fit within the FDA’s general wellness policy. Tensor and Axis are the clinical devices. They run above that threshold, use different waveforms, target different brain regions, and are built to integrate with hospital systems. Both are investigational and going through the FDA’s De Novo pathway, and the company’s website states clearly which product is which.[6]

That is the distinction this whole article turns on. When the wellness product and the medical product are physically different machines, the label describes the hardware instead of standing in for it. U’s CEO put it to me plainly: it is fine for a company to have both a wellness and a medical product, as long as it is clearly disclosed. I agree, and U shows that the disclosure is a lot more honest when there is a real difference to disclose.

Medical consent works because the person agreeing is told what is known, what is not, and what could go wrong. A trial participant gets that conversation as a matter of course. A shopper gets a product page. When a device lands in the wellness category, the consent conversation shrinks to a checkbox, and the facts a person would need, such as how small the independent trial was and that its results are unpublished, sit in a news article they may never see. I do not think the answer is to bury every consumer in warnings. It is to make sure the claims on the page never run ahead of the evidence behind them, because a person can only consent to what the box lets them understand.

What I Would Ask For

Start with claim parity. If a wellness product makes a claim about pain, mood or fatigue, the maker should be able to show the evidence it would file for that same claim in a regulated market, or drop the claim. Put the regulatory status of the product, in plain language, on the box and in the app, region by region.

Publish trial results before expanding claims, and register analysis plans so that readers can tell what was pre-specified. Apply the strictest region’s data protections to every user, since the data is the same data. Show users what the algorithm controls, give them a dosing log they can read, and let them override it.

Anna Wexler, a University of Pennsylvania medical ethicist, is quoted in the IEEE report: “As a consumer, I don’t think it’s clear.”[1] Whatever the full context, the sentence describes the buyer’s position well, and that is the gap. The hardware does not change at the border. The rules about what can be said about it do, and those rules are what the buyer is actually trusting.

The Label Decides

The next decade of human enhancement will not arrive as a single dramatic breakthrough. It will arrive as a dozen small devices, each with a clever regulatory identity and a reasonable story about why it does not need more scrutiny. If we let the label decide the evidence bar, we will end up with the products that found the cheapest label. U shows it does not have to work that way: build a different device for a different label, and tell the buyer which one they are holding. I would like the bar to follow the body.

About the Author

Len Noe is a Solutions Architect at BeyondTrust, Transhuman, Podcaster, International Cyber Security Speaker, Author, Technical Evangelist, and Biohacker with 11 implanted microchips. A former blackhat and ex-1% motorcycle club member with more than 30 years in technology, he has presented in over 70 countries and is featured in the documentary I Am Machine, which premiered at DEF CON 2025.

References

  1. Greg Uyeno. “Brain Stimulation Device Aims to Treat Women’s Health Conditions.” IEEE Spectrum, 5 November 2026. spectrum.ieee.org
  2. Emilė Radytė. “Launching Lutea and how it’s different to Nettle.” Samphire Neuroscience company blog (vendor source, used for the company’s own claims and regulatory wording), 12 October 2025. samphireneuro.com
  3. Samphire Neuroscience Ltd. “Privacy Policy.” Company legal page (vendor source), last updated 31 December 2025. samphireneuro.com
  4. U.S. Food and Drug Administration, Center for Devices and Radiological Health. “General Wellness: Policy for Low Risk Devices.” Guidance for industry and FDA staff, issued 6 January 2026 (supersedes the 2019 version). fda.gov
  5. “U.S. Approves First Device to Treat Depression with Brain Stimulation at Home.” Scientific American, December 2025 (date from the page’s editor’s note of 12 December 2025; no byline shown). scientificamerican.com
  6. U: The Mind Company. Product information, company website (vendor source), and correspondence between the company’s CEO and the author, November 2026. uthemind.company