FTC sues Hims & Hers for allegedly sharing patients’ medical data with advertisers Meta and Snap

The Federal Trade Commission has filed suit against Hims & Hers, the telehealth company best known for prescribing sexual wellness and mental health treatments, alleging that the firm funneled patient health data to advertisers Meta and Snap through website trackers. The complaint lands on a company that built its reputation on discretion, then quietly undermined it.

The mechanics are familiar. Tracking pixels embedded across the site captured identifying information tied to specific medical conditions and prescriptions. That data was then transmitted to advertising platforms, where it could be used to build profiles, target ads, and infer sensitive health details about users. The FTC's theory is straightforward: patients who believed they were engaging with a confidential healthcare provider were instead feeding a marketing apparatus.

Hims & Hers occupies an unusual position in the market. It scaled rapidly by offering direct-to-consumer prescriptions for conditions that many patients prefer to handle privately, bypassing the awkwardness of a clinic visit. That model depends entirely on trust. The company's pitch has always been that its platform is a safe, judgment-free alternative to traditional care. Sharing health data with ad networks is not a minor lapse; it is a direct contradiction of the core value proposition.

The regulatory exposure here is significant. The FTC has been increasingly aggressive on health data privacy, and the agency's recent track record suggests it is willing to pursue structural remedies, not just fines. A consent decree could impose ongoing compliance obligations, mandate audits, or restrict how the company uses tracking technologies. For a business model built on aggressive online customer acquisition, restrictions on tracking carry real operational consequences.

There is also a broader signal. Telehealth platforms sit at the intersection of healthcare regulation and digital advertising, a space where the rules are still being written. The Hims & Hers case will likely sharpen the boundaries. Any telehealth operator relying on third-party trackers to optimize marketing funnels now has a clear reason to reconsider that architecture.

For investors and competitors, the takeaway is simple. Privacy enforcement in digital health is no longer theoretical. The companies that survive will be those that treat patient data as a liability to be minimized, not an asset to be monetized.