The Federal Trade Commission sued Hims & Hers Health on Thursday, accusing the telehealth company of sharing sensitive patient medical information with Meta and Snap for use in advertising, in one of the agency’s most aggressive moves yet on health data privacy. The complaint alleges that the company embedded tracking pixels in its website that sent prescription data and other medical details to the social platforms.
The pixels, the FTC said, transmitted information about conditions patients were being treated for, along with the medications they were prescribed, enabling the platforms to target ads at the same users. The practice is common across the consumer web, but the FTC has argued that health information carries special protections and that companies must obtain consent before sharing it.
Hims & Hers built its business on the internet. The company sells treatments for hair loss, erectile dysfunction, weight loss and other conditions through a website and app, promising discretion and a fast consultation. Its growth has been one of the fastest in telehealth, and its marketing leans on reaching customers where they already spend their time online.
The FTC’s complaint strikes at the core of that model. If the allegations hold, the company did not just run ads on Meta and Snap; it fed those platforms the very data that made the ads possible, including details about the drugs users bought. The agency is seeking a ban on such sharing and civil penalties.
The case extends a campaign the FTC has been running against health-data sharing for several years. The agency has previously gone after companies that sold sensitive location and health data, and it has warned that pixels on health websites create an industry-wide problem. Thursday’s lawsuit names the practice directly and puts a marquee telehealth company at the center of it.
The implications reach well beyond Hims & Hers. Tracking pixels are embedded in the websites of thousands of companies, including health providers, and the FTC’s theory of the case could apply to any of them. The complaint is a warning that the agency considers medical information shared through pixels to be a violation, regardless of the company’s size.
Hims & Hers said it disagrees with the allegations and will fight the case, arguing that its data practices follow industry standards and that it has invested in privacy protections. The company’s stock fell on the news, though its business is unlikely to be interrupted while the case moves through the courts.
The legal question at the center of the case is one courts have only begun to answer: when does a pixel’s transmission of health information constitute a violation of federal privacy law? The FTC argues that the Health Insurance Portability and Accountability Act and the agency’s own authority over unfair practices protect such data. Companies argue that pixels are standard infrastructure and that the information is anonymized.
For the broader digital health industry, the case is a dividing line. Telehealth firms have grown by meeting patients where they are, and advertising platforms are how most of them acquire customers. If the FTC’s theory holds, the cheapest way to grow a health business becomes legally dangerous, and the industry will have to rebuild its marketing around first-party data.
The case has a history behind it. The FTC previously reached a settlement with GoodRx over similar allegations that the company shared health data through pixels, and it has warned repeatedly that the practice is widespread across the health industry. Thursday’s lawsuit, filed in federal court, escalates that campaign from settlements to litigation.
The business stakes are clear. Hims & Hers has grown into one of the largest telehealth companies by revenue, and its marketing depends on reaching consumers through the same platforms the complaint targets. The company’s response, that its practices follow industry standards, is the argument every company in the sector would make.
The outcome will be watched by advertisers and platforms as much as health companies. Meta and Snap are not named as defendants, but a ruling that pixel data from health sites cannot be used for ad targeting would cut off a source of ad revenue for both. The platforms have said they restrict the use of sensitive health data, and the case will test how far that restriction goes.
For patients, the case raises a question the industry has struggled to answer: what happens to the data produced by a medical consultation conducted over the internet. The FTC’s position is that it deserves the same protection as a visit to a doctor’s office. Whether the courts agree will shape the next decade of digital health.
The case also lands amid a broader reckoning over health data. Regulators in the U.S. and Europe have been tightening rules on how medical information moves through the ad ecosystem, and state attorneys general have filed their own actions. Thursday’s lawsuit gives the federal government’s position: patient data, in the FTC’s view, is not a marketing input.
