The Federal Trade Commission, joined by the attorneys general of Utah and California, filed suit against telehealth provider Hims & Hers on July 30, alleging the company illegally shared consumers’ sensitive health information with third-party advertisers without authorization.
The complaint targets practices affecting users who sought treatment through the platform for conditions including erectile dysfunction, hair loss, and mental health disorders. The FTC described the case as one of the most significant health-data privacy enforcement actions against a major telehealth company.
Hims & Hers serves millions of U.S. subscribers through its app-based platform, which connects consumers with licensed healthcare providers for consultations, prescriptions, and treatment plans. The company has grown rapidly as demand for telehealth services surged during and after the COVID-19 pandemic.
The FTC alleged that the company shared detailed personal health information — including the specific conditions users sought treatment for — with advertising platforms and other third parties in violation of federal law. The bipartisan, multi-state action reflects concerns that telehealth platforms operating outside traditional healthcare settings may fall into a legal gray zone where standard HIPAA protections do not apply.
The attorneys general of Utah and California joined the federal action, adding state-level enforcement authority to the case. The multi-jurisdictional approach signals coordinated regulatory scrutiny of telehealth privacy practices.
The case sets enforcement precedent for how telehealth platforms must handle sensitive health data, with direct implications for a rapidly growing sector. Consumer health information shared through apps and digital platforms has become an increasingly contentious privacy issue as more Americans seek medical care through nontraditional channels.
The FTC is seeking injunctive relief and civil penalties, according to the complaint.