On July 29, 2026, the Federal Trade Commission filed suit against telehealth giant Hims & Hers, alleging the company shared customers' sensitive medical and health information with advertisers and tech platforms — including Meta, Snap, Microsoft, Pinterest, Reddit, and X — while misleading consumers about its privacy practices. According to the complaint, filed in a California federal court, Hims & Hers embedded pixel-sized trackers on its websites that "captured and shared users' health information," contrary to the company's own privacy policy. The FTC also accused the company of deceptive billing and of designing cancellation flows that made it difficult for customers to stop recurring charges. Hims & Hers shares fell roughly 10% on the news.
Why It Matters
For the sexual-health telehealth sector — Hims, Ro, BlueChew, and a long tail of ED and TRT startups — this is a shot across the bow. The business model of many of these companies depends on cheap, targeted digital advertising to acquire customers at scale, and ad platforms like Meta and Snap have long been the most efficient channels. If the FTC establishes that routine pixel-based tracking of health-adjacent browsing violates the FTC Act when it contradicts a stated privacy policy, every player in the space will need to audit its martech stack, tighten consent language, and potentially sacrifice ad performance for compliance. For investors, the suit adds regulatory risk to a category already grappling with GLP-1 price wars and compounding-rule uncertainty. And for consumers, it's a reminder that the discretion these platforms promise — a central part of their pitch for stigmatized conditions — is only as good as the code running in the background.The allegations cut close to the core of Hims & Hers' business. The publicly traded company provides prescription treatments for sexual wellness (notably erectile dysfunction), mental health, hair loss, and weight loss — categories where the mere fact that someone is a customer is deeply revealing. When a tracking pixel fires as a user browses ED or mental-health products and relays that behavior to an ad network, it can expose exactly the kind of information most people expect a healthcare provider to guard. The FTC framed the case as its latest crackdown on healthcare companies quietly funneling sensitive data to outside firms without clear consent.
Hims & Hers denied wrongdoing, calling the lawsuit "unsupported" in a post on X and noting it followed a nearly three-year FTC investigation. The company has publicly reaffirmed a "commitment to privacy," but the litigation lands during an already turbulent stretch: Hims disclosed a customer-support data breach earlier in 2026, and the company has been racing to diversify beyond compounded GLP-1 drugs into menopause care, branded weight-loss partnerships, and new form factors like prescription gummies.
The case also arrives amid rising regulatory attention to the entire men's-sexual-health telehealth vertical. Separately in early August, coverage highlighted FTC concerns about Meta's surveillance of users of erectile-dysfunction apps more broadly — a sign that ad-tech tracking on intimate-health platforms is becoming a defined enforcement priority rather than a one-off complaint.
Sources
- FTC sues Hims & Hers for allegedly sharing patients' medical data with advertisers Meta and Snap — TechCrunch
- FTC sues Hims & Hers over alleged privacy violations, deceptive billing practices — MedTech Dive
Update — 2026-08-06
Initial entry — story first created.
Update — 2026-08-13
The FTC case now sits atop a widening pile of legal and financial pressure. On August 11, 2026, Hims & Hers reported second-quarter results showing revenue of roughly $753 million — up about 40% year over year — with international revenue near $131 million, and the company raised its full-year outlook toward the $3.3 billion range. But the quarter also carried a net loss driven by rising weight-loss and operating expenses, and HIMS shares slid sharply (down roughly 10–15% intraday on the print) as investors weighed the revenue beat against the bottom-line miss and mounting legal overhang.
Separately, the FTC confirmed its investigation into Hims & Hers is ongoing (a GlobeNewswire investor notice on August 11 flagged the continuing probe), and multiple plaintiffs' firms — including Kessler Topaz Meltzer & Check — announced securities-fraud investigations into whether the company adequately disclosed the data-sharing practices at the center of the FTC's July 29 lawsuit. Consumer-facing coverage sharpened too: Gizmodo (August 7) detailed a stack of FTC complaints from customers describing surprise charges and hard-to-cancel subscriptions — the same "deceptive billing" conduct the agency's complaint targets. The through-line: what began as a privacy suit is compounding into an earnings, disclosure, and consumer-trust problem for the sexual-health telehealth category's largest public player.
New Sources
- Hims & Hers Health, Inc. Reports Second Quarter 2026 Financial Results — StockTitan
- 'They Are Thieves': FTC Complaints About Hims & Hers Detail Surprise Charges — Gizmodo
- Hims & Hers responds to FTC — StockTitan
Update — 2026-08-22
Two developments this week sharpened the case. First, the legal posture is broader than initially reported: the FTC is not acting alone. Per the agency's own press release and analysis published August 19 by Hunton Andrews Kurth, the Commission was joined by Utah and California — the latter acting through Los Angeles County Counsel — with the states alleging violations of their respective consumer protection laws alongside the FTC's claims under the FTC Act and the Restore Online Shoppers' Confidence Act. The agencies are seeking injunctive relief, monetary relief, and civil penalties.
Hunton flags the precedent value plainly: this is the current FTC's first enforcement action targeting tracking pixels and unauthorized health data sharing with third-party ad platforms. That makes the outcome a template for every telehealth and sexual-health platform running Meta or Snap pixels on intake flows.
The FTC's complaint also puts more weight on the billing conduct than early coverage suggested. Per the agency, most consumers never actually receive the provider consultation Hims advertises — submitting an intake form enrolls them in a recurring prescription subscription "without having a chance to review or approve it." The complaint quotes a consumer: "I was told that I would be able to speak with a doctor in a few days and that nothing would be charged to my card that day. Him's & Her's [sic] charged me immediately!" On cancellation, the FTC alleges that even after Hims introduced online cancellation in 2023, the cancel button appeared only after users selected "add/remove items from order" and navigated several further steps.
Second, CEO Andrew Dudum went on the offensive. In an August 18 CNBC interview he argued the FTC lawsuit "misunderstands how the company works," positioning Hims as an "active disruptor." The market response was volatile in both directions: HIMS fell roughly 14% on the suit before recovering sharply — TIKR reported a 14% single-day jump following Dudum's CNBC appearance. Multiple plaintiffs' firms, including Kaplan Fox and Kessler Topaz Meltzer & Check, have since announced securities investigations.
New Sources
- FTC and States Act Against Hims & Hers for Deceptive and Unlawful Privacy Practices — Federal Trade Commission
- FTC, California and Utah Sue Telehealth Company Hims & Hers for Deceptive and Unlawful Privacy Practices — Hunton Andrews Kurth Privacy & Information Security Law Blog
Update — 2026-09-09
The securities class action has landed, with a November deadline attached. A shareholder suit — Velanki v. Hims and Hers Health, Inc., No. 26-cv-09313 — has been filed in the U.S. District Court for the Northern District of California on behalf of investors who bought HIMS securities between August 4, 2025 and July 29, 2026. Kessler Topaz Meltzer and Check announced the class period and deadlines on September 5, 2026; investors have until November 2, 2026 to seek lead plaintiff status. The August securities investigations flagged in the previous update have now converted into an actual filed case.
The complaint's theory maps directly onto the FTC's allegations, which is what makes it dangerous. Per the class action, defendants allegedly failed to disclose that Hims shared consumers' health information with third-party advertising platforms; that it charged consumers for prescriptions almost immediately after intake-form submission despite telling them they would first consult a medical provider to find a treatment "right for them"; that this conduct exposed the company to regulatory scrutiny; that it was therefore reasonably likely to incur fees and penalties; and that positive statements about the business consequently lacked a reasonable basis. In short: the plaintiffs are borrowing the FTC's factual record and recasting it as a disclosure failure to shareholders.
The price impact is documented and specific. On July 29, 2026, when the FTC filed its lawsuit accusing the company of "deceptive and unlawful privacy practices" including sharing sensitive health details with Snap and Meta, HIMS fell $4.32 per share — 14.73% — closing at $25.00.
This is the compounding risk pattern the telehealth sector should be watching. A privacy enforcement action against a sexual health platform now reliably produces a second front: securities litigation that survives independently of whether the regulator ultimately prevails. Even a favorable FTC outcome for Hims does not automatically dispose of a disclosure claim about what the company told investors before the suit. For every DTC platform running advertising pixels on intake flows for ED, hair loss or hormone therapy, the cost of a pixel is no longer a privacy fine — it's a privacy fine plus a class period.
New Sources
Update — 2026-09-15
A third front opens: a private consumer class action in Florida, filed under a state wiretapping statute. On September 1, 2026, plaintiff Johnathon Holbrook filed a class action complaint against Hims and Hers Health in Florida federal court, alleging violations of the Florida Security of Communications Act and the Florida Deceptive and Unfair Trade Practices Act, plus breach of confidence and unjust enrichment. Top Class Actions reported the filing on September 11. This is distinct from both the FTC enforcement action and the Velanki securities suit already tracked above — it is consumers suing directly, on their own behalf, under state law.
The mechanism alleged is more granular than the FTC's framing, and that granularity is the point. According to the complaint, every prescription purchase begins with an online intake questionnaire requiring the visitor to disclose their treated condition, symptoms and their impact, treatment goals, current mood, family medical history and date of birth. The complaint alleges that when a consumer selected an answer to a health question, that information was transmitted to Amplitude, an outside product-analytics company, and written into a durable per-person profile on Amplitude's servers. It further alleges that viewing a health-condition or prescription-product page transmitted that visit to advertising platforms. The named third parties include Amplitude, Datadog, Meta, Snap, Reddit, Microsoft, Pinterest, Google and The Trade Desk — a longer list than the Meta-and-Snap pairing that dominated coverage of the FTC complaint.
The complaint puts the company's subscriber base at approximately 1.1 million active subscribers across treatments for erectile dysfunction, premature ejaculation, hair loss, weight loss, depression and anxiety, low testosterone, acne and skin conditions. The proposed class is limited to Florida residents whose electronic communications were allegedly intercepted by third-party tracking technologies on the company's site within the limitations period. The plaintiff demands a jury trial.
The strategic significance is the statutory vehicle. State wiretapping and communications-privacy laws — Florida's SCA here, and California's CIPA in parallel litigation across the industry — give private plaintiffs a cause of action with statutory damages that does not depend on an FTC win, a data breach, or proof of concrete financial harm. For sexual health platforms specifically, the "interception" framing is potent because the intercepted content is the intake answer itself: which condition, which symptoms, which treatment goal. Three simultaneous proceedings arising from one set of tracking pixels — federal regulator, shareholders, and now consumers — is the full liability stack the category has been warned about, and it is now visible in a single company's docket.
New Sources
Update — 2026-10-23
Hims files its answer: the privacy policy said so. On October 22, 2026, Hims & Hers filed a motion asking U.S. District Judge Vince Chhabria (N.D. Cal.) to dismiss all nine counts of the FTC's July complaint, which Utah and Los Angeles County joined. Bloomberg first reported the filing. Hims' core privacy argument is that the privacy policy users acknowledge when they create an account explicitly says it "may provide personal information to marketing and advertising partners," including "sensitive information such as health data." The company argues that "private" and "discreet" in its marketing described the convenience of online care, not a promise not to share data with advertisers. On subscriptions, Hims says the intake screens disclosed pricing before submission, citing as one example a recurring charge of $147 every 90 days. It says customers are charged only if a prescription is issued, and that its historical plans were fixed-term contracts paid in installments, not negative-option billing. It adds that cancellation has long been available by phone, email or chat, with online cancellation added in April 2023. It also argues the FTC's claims lack the required specificity and that the agency hasn't shown grounds for monetary or injunctive relief. A hearing is set for January 7, 2027. The stock closed flat and slipped about 1% after hours.
What changed: This is the first time Hims has argued its case in court. Its defense is disclosure: users consented, because the policy told them. That position has strategic costs. If Chhabria accepts it, the FTC's "deceptive privacy" theory weakens, but the result also confirms in court that a sexual-health platform can share ED-condition data with ad networks as long as the policy says it may. The parallel Florida wiretap class action (see the September 15 update) rests on the interception itself rather than the wording of the policy. It also lands the day after Hims began prescribing injectable and oral testosterone, its first controlled substance, so regulators reviewing how it handles intake data now have a higher-stakes product line to examine.