The Federal Trade Commission (FTC) has initiated legal action against telehealth provider Hims & Hers, alleging the company illicitly shared sensitive medical data of its users with major advertising platforms Meta Platforms and Snap Inc. The lawsuit, filed on July 30, 2026, claims the company utilized digital tracking tools to transmit private health information—specifically regarding mental health and sexual wellness—to third-party advertisers without obtaining explicit patient consent.
The complaint asserts that Hims & Hers integrated website trackers across its digital properties, which captured user interactions and health-related queries. This data was then allegedly transmitted to Meta and Snap, allowing the advertising giants to build profiles on users based on their medical conditions and prescriptions. The FTC contends these actions violate the Federal Trade Act, which prohibits unfair or deceptive acts or practices in commerce.
The agency is seeking several remedies, including injunctive relief to immediately halt the transmission of patient data to advertisers, significant civil penalties, and a permanent order prohibiting the company from further unauthorized data disclosures.
In a public statement following the filing, Hims & Hers stated that the company is currently reviewing the allegations and reaffirmed its commitment to maintaining patient privacy.
Analysis:
This litigation represents a strategic escalation by the FTC in its campaign to regulate the “gray area” of health data privacy. While the Health Insurance Portability and Accountability Act (HIPAA) governs how traditional healthcare providers handle data, many telehealth platforms operate in a regulatory environment where the lines between “health data” and “consumer data” are blurred. By framing this as a violation of the Federal Trade Act’s prohibition on deceptive practices, the FTC is signaling that it will use consumer protection laws to fill the gaps left by outdated healthcare privacy statutes.
Furthermore, the inclusion of Meta and Snap in the complaint highlights the FTC’s focus on the broader data ecosystem. The agency is not merely targeting the point of collection (Hims & Hers) but is scrutinizing the incentive structures of Big Tech firms that profit from the acquisition of high-intent, sensitive user data. This case suggests that the FTC views the unauthorized commercialization of health data as an inherent “unfairness” to the consumer, regardless of whether the company’s privacy policy contained vague disclosures.
The telehealth industry experienced an unprecedented surge in growth during and after the pandemic, often prioritizing rapid user acquisition and digital marketing over rigorous data compartmentalization. Hims & Hers, which markets treatments for erectile dysfunction, hair loss, and anxiety, deals with highly stigmatized medical conditions. The transmission of such data to social media platforms—where it can be used for hyper-targeted advertising—creates a significant privacy risk for users who may not realize their medical history is being leveraged for corporate profit.
The background of this case is rooted in a broader trend of “pixel” litigation. Over the last several years, the FTC and various state attorneys general have targeted hospitals and health clinics for using the Meta Pixel—a piece of code that allows Meta to track user behavior—on pages where patients scheduled appointments or viewed medical results. The Hims & Hers case extends this scrutiny to the direct-to-consumer (DTC) telehealth model, where the platform acts as both the provider and the marketer.
The core of the FTC’s argument rests on the lack of “explicit consent.” In the context of sensitive health data, the agency is moving away from the “opt-out” or “implied consent” models (where a user is assumed to agree by using a site) toward a strict “opt-in” requirement. The FTC alleges that Hims & Hers failed to provide users with a clear, conspicuous choice regarding whether their medical data could be shared with advertising partners.
As this case moves through the legal system, several key developments will be critical to watch. First, the court’s determination on what constitutes “deceptive” disclosure will set a precedent for the entire DTC health industry. If the FTC successfully argues that a general privacy policy is insufficient for the sharing of sensitive health data, thousands of other health-tech companies may be forced to overhaul their user interfaces and data-sharing agreements.
Second, the outcome may prompt the FTC to push for more comprehensive federal privacy legislation. The agency has frequently lamented the fragmented nature of U.S. privacy laws, which vary by state and sector. A victory in this case would provide empirical evidence of the need for a national standard that treats all health-related data—regardless of whether it is held by a doctor or an app—with the same level of protection.
Finally, the industry will be watching for whether the FTC seeks to penalize the recipients of the data, Meta and Snap, or if the liability will remain solely with the data collector. While the current lawsuit targets Hims & Hers, the evidence gathered during discovery could lead to further investigations into how advertising platforms handle and store “sensitive” categories of data received from third-party trackers.
The resolution of this lawsuit will likely define the boundaries of the telehealth business model. For years, the industry has relied on the synergy between medical consultation and aggressive digital marketing. If the FTC successfully restricts the flow of patient data to advertisers, the cost of customer acquisition for telehealth firms will likely rise, potentially forcing a shift in how these companies grow and interact with their patient base.
Ultimately, the case underscores a fundamental tension in the modern digital economy: the conflict between the corporate drive for data-driven personalization and the individual’s right to medical confidentiality. By targeting a high-profile entity like Hims & Hers, the FTC is attempting to establish that medical privacy is not a luxury, but a non-negotiable requirement of the digital healthcare experience.
Sources:
TechCrunch – FTC sues Hims & Hers for allegedly sharing patients’ medical data with advertisers Meta and Snap https://techcrunch.com/2026/07/30/ftc-sues-hims-hers-for-allegedly-sharing-patients-medical-data-with-advertisers-meta-and-snap/
Corrections
If you believe this article contains an error, contact Herald Express with the source URL and supporting evidence.
Story synopsis gathered from: TechCrunch — source
