On July 29, 2026, the Federal Trade Commission — joined by the state of Utah and by California through Los Angeles County Counsel — sued Hims & Hers in federal court, alleging the telehealth company shared consumers' sensitive health information with third-party advertising platforms including Meta and Snap despite promising to keep patient data private. The complaint, filed in the Northern District of California, also alleges deceptive billing and cancellation practices. HIMS shares fell sharply on the news, dropping roughly 10–15% during Wednesday trading.

Why It Matters

This is the most consequential US enforcement action yet against the DTC sexual-health telehealth model, and it hits three pressure points at once: privacy, dark-pattern subscriptions, and the gap between "consult a provider" marketing and asynchronous prescribing reality. The privacy piece sets the sharpest precedent. Ad-platform pixels and customer-list uploads are standard growth infrastructure across the sexual wellness sector — this is the same tooling every DTC brand uses. What the FTC is saying is that when the underlying data reveals a medical condition, and when your marketing promises privacy, that standard tooling becomes a deceptive practice. Every ED platform, PrEP service, menopause telehealth brand, and sexual wellness DTC company running Meta or Snap tracking on condition-specific pages should read the complaint as a compliance roadmap. Note also that this is not a HIPAA action — it's Section 5 deception plus state consumer protection law, which means it reaches companies that consider themselves outside the HIPAA perimeter. The billing claims are the ones with revenue consequences. Asynchronous prescribing — no live consult, just an intake form reviewed by a clinician — is the economic engine of the entire category. The FTC isn't attacking asynchronous care itself; it's attacking marketing that implies a consultation the customer doesn't get, and charges that land before any clinical review. That is a fixable disclosure problem, but fixing it slows the funnel, and funnel speed is the whole business model. Expect competitors to quietly rewrite their intake flows in the coming weeks. Finally, the timing compounds an existing pattern. Hims & Hers already disclosed a customer support data breach in April 2026 affecting millions of subscribers. Two data-trust failures in four months, at the category's flagship public company, gives regulators and skeptical legislators an easy story about whether sexual health data is safe in DTC hands.

The privacy allegations are the ones that should worry every sexual health company. According to the FTC, Hims shared consumers' health information with advertising platforms in two ways: by uploading lists of certain customers to those companies, and via third-party tracking technologies that automatically transmitted "Events" — the actions visitors took on Hims' website — to the ad platforms. The agency's framing is blunt: "Hims was only able to create audiences with such specificity because it flouted the promises it made to its users about treating their medical conditions 'privately' or keeping their health information private." Hims is a company whose largest historical business line is erectile dysfunction prescriptions. The "specificity" at issue is, in plain terms, knowing which users sought treatment for which conditions.

The second and arguably broader set of claims concerns the funnel itself. The FTC alleges Hims advertised that consumers could "connect" and consult with a medical provider to find a treatment that is "right for them," but that most consumers never actually got a consultation — instead, submitting the online intake form triggered an immediate charge and enrollment in a recurring subscription. The complaint quotes a consumer who said they were told they could speak with a doctor in a few days and that nothing would be charged that day: "Him's & Her's [sic] charged me immediately! I never gave consent to apply charges before I spoke with a healthcare professional." On cancellation, the FTC alleges that before 2023 most customers could only cancel by phone, email or chat, and that even after online cancellation arrived, the cancel button was hidden behind an "add/remove items from order" option and several further steps.

Hims & Hers rejected the allegations. In a statement, the San Francisco company called the claims baseless and said it would defend itself vigorously, arguing the suit "disregards substantial evidence" provided during what it described as a nearly three-year FTC investigation and "contorts the law to try to manufacture claims." The company added that its privacy policy makes clear users may choose how their data is used, and that information shared with healthcare providers is used only in providing care.

Sources

Update — 2026-07-30

Initial entry — story first created.