FTC Sues Hims & Hers Over Secret Health Data Sharing With Meta and Snap
Federal regulators allege the telehealth company violated privacy promises by transmitting sensitive patient information to advertising platforms despite marketing itself as secure and discreet.
Privacy Promises Versus Hidden Data Sharing
According to the FTC complaint, Hims & Hers marketed its services as “100% online, private, and secure,” assuring consumers that medical records would remain accessible only to healthcare providers involved in their treatment. However, the regulatory action alleges that despite these assurances, the company transmitted detailed user activity data to third-party advertising platforms including Meta and Snap through sophisticated tracking technologies.
The investigation revealed that Hims deployed Meta Pixel and Meta Conversions API alongside tracking tools from Google, Microsoft, Reddit, TikTok, Pinterest, and X to capture and share information about user behavior on its platform. This data transmission reportedly affected consumers seeking treatment for sensitive conditions including erectile dysfunction, premature ejaculation, mental health issues, hair loss, and weight management—areas where privacy expectations run particularly high.
Deceptive Marketing and Enrollment Practices
The lawsuit also targets Hims’ subscription and billing practices. The company allegedly advertised “free consultations” and suggested consumers could evaluate whether a treatment suited them before making any purchase commitment. Regulators contend these claims were misleading, as the complaint indicates consumers were enrolled in recurring prescription subscriptions without genuine informed consent.
Hims & Hers, a publicly traded telehealth provider known particularly for its sexual wellness medication offerings, aggressively promoted privacy across television, radio, and podcast advertising, in addition to influencer partnerships. This consistent messaging about discretion and confidentiality stands in stark contrast to the data-sharing practices outlined in the federal complaint.
Regulatory Action and Data Control
Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection, characterized the situation as troubling. He noted that consumers found themselves simultaneously locked into unwanted recurring charges and unable to maintain control over their most sensitive personal health information. The FTC indicated its commitment to holding companies accountable when they deprive consumers of meaningful choice regarding both product subscriptions and data privacy.
The suit was filed in the U.S. District Court for the Northern District of California on Tuesday, as confirmed by the FTC’s statement regarding the case.
This case highlights growing concerns about how centralized platforms manage sensitive personal data—issues that distributed, blockchain-based health records systems could potentially address through cryptographic privacy and user-controlled data permissions.
Source: FTC, via Decrypt. Not financial advice.