The Federal Trade Commission has filed a major enforcement action against Hims & Hers, one of America’s largest telehealth platforms, alleging the company systematically shared patients’ sensitive health information with social media and advertising giants Meta and Snap. Filed on July 29 and joined by the attorneys general of Utah and California, the complaint represents a significant escalation in regulatory scrutiny over how digital health companies handle consumer privacy.
What Happened
According to the FTC’s complaint, Hims & Hers engaged in deceptive practices by sharing detailed patient health data—including information about prescriptions, diagnoses, and medical conditions—with Meta and Snap for targeted advertising purposes. The telehealth company allegedly failed to obtain meaningful informed consent from users before transmitting this highly sensitive information to third-party platforms.
Beyond the data-sharing allegations, the FTC also accuses Hims & Hers of charging customers without proper authorization and implementing subscription cancellation processes deliberately designed to discourage or prevent customers from leaving. These practices collectively violate the FTC Act’s prohibition against unfair and deceptive business practices.
Key Points
The lawsuit highlights a critical tension in the digital health economy: the business model that makes telehealth accessible and affordable often relies on advertising partnerships and data monetization. Hims & Hers, which went public in 2021 and serves millions of patients nationwide, built part of its growth strategy around precision marketing enabled by patient health data.
The complaint suggests that pixel tracking technology embedded on Hims & Hers websites allowed Meta and Snap to collect health information about site visitors in real-time, enabling the creation of targeted advertising audiences. This practice essentially converted patient confidentiality into a revenue stream, allegedly without transparent disclosure to affected users.
The multi-state nature of the enforcement action signals coordinated regulatory pressure and suggests the FTC views these violations as particularly egregious or systematic in nature.
What This Means
This lawsuit establishes clearer boundaries for telehealth companies operating in the increasingly blurred space between healthcare privacy and digital advertising. For patients, it reinforces that health information enjoys special legal protections, even in digital contexts where data sharing has become normalized.
For the broader tech industry, the action serves as a warning that integrating health data with advertising platforms creates substantial legal and reputational risks. Companies handling sensitive personal information must implement affirmative consent mechanisms and transparent disclosure practices, not rely on buried terms of service.
The case may ultimately reshape how digital health companies monetize their user bases, potentially eliminating the direct health-data-for-advertising partnerships that currently exist. It also demonstrates the FTC’s commitment to enforcing consumer protection laws in emerging digital health sectors.
