Hims & Hers FTC Lawsuit Alleges Data Sharing

Hims & Hers Health Inc. was sued on July 29, 2026, by the Federal Trade Commission, joined by Utah and California, alleging it shared sensitive health data with Meta and Snap and used deceptive billing and cancellation practices.

FTC Complaint Alleges Data Sharing and Billing Violations

The FTC, along with Utah and the Los Angeles County Counsel for California, filed the complaint in the U.S. District Court for the Northern District of California after a 2-0 commission vote authorized the action. The complaint accuses Hims & Hers of sharing consumers’ sensitive health information with advertising platforms including Meta and Snap by providing customer lists containing health data and using third-party tracking technologies that automatically transmitted users’ online actions on Hims’ site to these platforms. This allegedly revealed sensitive health details through ordinary site interactions.

The complaint also alleges deceptive subscription billing. It claims Hims charged consumers for prescriptions almost immediately after intake forms were submitted, despite advertising that customers would consult with a provider to determine appropriate treatment. The company is accused of failing to clearly disclose when monthly refills would occur and making cancellation difficult through hard-to-navigate processes. An FTC spokesperson said most customers do not receive a provider consultation before being charged.

The complaint asserts violations of the FTC Act, the Restore Online Shoppers’ Confidence Act (ROSCA), and state laws including the Utah Consumer Sales Practices Act and California’s False Advertising Law and Unfair Competition Law. Regulators seek permanent injunctions and monetary penalties.

Christopher Mufarrige, director of the FTC’s Bureau of Consumer Protection, said, “The FTC’s complaint lays out a troubling scenario—consumers unknowingly locked into recurring subscriptions and the disclosure to third parties of consumers’ most private health information without their consent.”

Company Response and Business Context

Hims & Hers said in a Business Wire statement that it will vigorously defend itself, arguing the complaint ignores substantial evidence the company provided during a nearly three-year investigation, misapplies state law and telehealth industry standards, and aims to generate headlines. The company said its privacy policy allows customers to choose how their data are used and that patient information shared with healthcare providers is used only to provide care.

The company reported 2.6 million subscribers across personal health and consumer care offerings, up 9.0% year over year. Its first-quarter results showed revenue of $608.1 million and a loss of $0.40 per share. The enforcement action adds regulatory and reputational pressure that may affect the company’s recent subscriber growth.