FTC sues Hims & Hers over health-data sharing with Meta, Snap

The Federal Trade Commission, joined by California and Utah consumer protection authorities, filed a civil enforcement complaint against Hims & Hers Health, Inc. on July 29, 2026, in the U.S. District Court for the Northern District of California, case no. 3:26-cv-07871 the FTC. The complaint alleges violations of Section 5(a) of the FTC Act and Section 4 of the Restore Online Shoppers' Confidence Act, and seeks a permanent injunction, monetary relief, civil penalties, and other remedies.

Health-Data Sharing Allegations

The FTC alleged that Hims & Hers shared consumers' sensitive health information about medical conditions with third-party advertising platforms operated by Meta and Snap the FTC, despite making privacy promises to users. The complaint identifies the recipients explicitly and describes the sharing as a violation of consumer privacy expectations around health data—information that telehealth users reasonably expect to remain confidential.

This practice is particularly significant because health information is among the most sensitive personal data a company can handle, subject to heightened regulatory scrutiny under federal privacy frameworks.

Deceptive Billing and Cancellation Claims

Beyond the privacy violations, the FTC accused Hims & Hers of engaging in deceptive billing and cancellation practices. The complaint states the company "fails to clearly disclose" that it charges consumers for prescriptions almost immediately after they submit an intake form the FTC. The FTC also alleged the company made it deliberately difficult for consumers to cancel subscriptions, trapping users in recurring charges.

These practices constitute a second layer of consumer harm distinct from the privacy violations—consumers were allegedly misled about when charges would occur and then obstructed when attempting to exit the subscription.

Company Response

Hims & Hers responded on July 29, 2026, stating, "This lawsuit disregards substantial evidence we provided the FTC during its nearly three-year investigation, ignores established state laws and industry standards in telehealth, and contorts the law to try to manufacture claims" Hims investor relations. The company's defense signals a challenge to both the FTC's factual characterization and its legal interpretation of telehealth privacy obligations.

Regulatory Context

The three-year investigation timeline indicates sustained FTC scrutiny of Hims & Hers' practices, suggesting the agency accumulated substantial documentary evidence before filing suit. The involvement of both California and Utah authorities reflects multistate coordination on consumer protection, a pattern increasingly common in high-profile tech enforcement actions.

The case remains active in federal court, with the complaint and supporting documents available in the public docket.