The Federal Trade Commission has filed suit against telehealth company Hims & Hers, alleging that the firm shared sensitive customer health information—including details about orders for sexual wellness products—with advertising platforms such as Meta and Snap, despite promising users their data would remain private.
What the FTC Alleges
According to the regulator, Hims & Hers assured customers that their personal health information would be protected, then quietly passed that data to third-party advertising networks. The complaint centers on the disconnect between the company's stated privacy commitments and its actual data-handling practices.
The information allegedly disclosed reportedly touched on some of the most intimate categories of user activity, including purchases tied to sexual wellness treatments. For a telehealth provider whose business depends on customer trust, sharing such details with ad platforms represents a serious breach of consumer expectations, regulators argue.
Customers thought their most private health details were staying private—regulators say they were quietly fed to advertisers.
The FTC's action highlights a growing scrutiny of how digital health companies handle the flood of sensitive data they collect. Telehealth platforms sit at the intersection of medicine and technology, and the personal information they gather is far more sensitive than typical e-commerce data.
Why It Matters
Data-sharing arrangements between health apps and advertising giants have drawn increasing regulatory heat in recent years. When companies feed health-related information into advertising ecosystems, that data can be used to target users with ads or build detailed behavioral profiles—often without meaningful consent.
The case underscores several recurring concerns for consumers and regulators alike:
- Privacy promises that don't match backend data practices
- Sensitive health data flowing to major ad platforms like Meta and Snap
- The difficulty users face in knowing where their information ends up
For the broader telehealth and digital health sector, the suit sends a clear signal that regulators are willing to act when companies fail to honor their privacy commitments. As more health services move online, the pressure on providers to safeguard user data—and to be transparent about how it is used—continues to intensify.