Mobile health (mHealth) applications have rapidly become a cornerstone of modern healthcare, offering users convenient tools for health monitoring, fitness tracking, and chronic disease management. With millions of downloads globally, these apps are deeply integrated into everyday life. However, their widespread adoption has brought increasing concerns about privacy and security, particularly in the wake of frequent data breaches and reports of questionable data-sharing practices. This study examines the privacy and security practices of mHealth applications through a comprehensive analysis of permissions, embedded third-party trackers, and user reviews. By combining technical evaluation with user-centric insights, the findings reveal gaps in transparency and data protection, underscoring the need for stronger regulatory frameworks and privacy-preserving design principles. This research provides critical recommendations for policymakers and developers to enhance the security, privacy, and trustworthiness of mHealth applications, ensuring they meet both functional and ethical standards in handling sensitive user data.