US FTC · August 13, 2026
FTC and States Sue Hims & Hers Over Alleged Sharing of Sensitive Health Data
The FTC, joined by Utah and California (via LA County Counsel), has sued telehealth provider Hims & Hers, alleging it shared consumers' sensitive medical condition data with third-party ad platforms despite privacy promises, and misled users on billing and cancellation.
What Happened
The Federal Trade Commission, joined by the states of Utah and California (the latter acting through Los Angeles County Counsel), has filed a complaint against telehealth provider Hims & Hers. According to the complaint, the company shared consumers' sensitive health information—including data about medical conditions—with third-party advertising platforms, even as it represented to consumers that its services maintain their privacy.
Allegations at a Glance
Per the press release, the complaint alleges two distinct categories of unlawful conduct:
- Deceptive privacy claims: Hims & Hers is alleged to have shared sensitive health information about consumers' medical conditions with third-party advertising platforms while simultaneously claiming to consumers that its services keep their information private.
- Billing and cancellation practices: The complaint also alleges the company deceived users about billing and cancellation practices, though the excerpt does not detail the specific mechanics of these claims.
The joint action by a federal regulator and two state authorities signals coordinated enforcement interest in telehealth privacy practices and consumer billing transparency.
What This Means
For telehealth companies and other organizations handling sensitive health data, this action underscores that regulators continue to scrutinize the gap between stated privacy commitments and actual data-sharing practices with advertising and analytics vendors. Organizations that promise "privacy" to consumers should ensure those representations are accurate and verifiable against actual data flows to third-party ad platforms, particularly where health or medical condition data is involved. Additionally, the inclusion of billing and cancellation allegations in the same action is a reminder that privacy enforcement can be paired with broader consumer protection claims regarding subscription and billing transparency. Companies in the health and wellness space should review vendor data-sharing arrangements, marketing/privacy claims, and cancellation disclosures to confirm alignment between representations made to consumers and operational reality.