FTC Sues Hims & Hers for Sharing Patient Data with Meta, Snap
The FTC accuses Hims & Hers of unlawfully sharing patient data with Meta and Snap without consent.
Why it matters: This case highlights risks of inappropriate health data sharing with major tech platforms. Corporate legal and compliance teams must increase scrutiny on vendor data practices to protect patient privacy.
- The FTC complaint, filed in July 2026, alleges Hims & Hers shared sensitive health data with Meta and Snap without consumer consent.
- Better Business Bureau reports 4,244 complaints over three years against Hims & Hers, many about subscription cancellations and billing issues.
- A February 2026 breach exposed customer info on Hims & Hers’ third-party support platform, according to FTC documents.
- In September 2025, the FDA warned Hims & Hers for misleading marketing of compounded semaglutide drugs, falsely suggesting they match FDA-approved products like Ozempic.
The Federal Trade Commission (FTC) filed a complaint in July 2026 against Hims & Hers Health, Inc., claiming the company improperly shared private health information with Meta and Snap without obtaining user consent. The complaint, which is publicly accessible, details how this sharing violated privacy laws and consumer protection standards (FTC press release).
The FTC further highlights deceptive practices related to subscription cancellations. Data from the Better Business Bureau shows Hims & Hers received 4,244 consumer complaints from 2023 to 2026, many citing issues with canceling subscriptions and unexpected charges (BBB report).
Compounding concerns, a significant data breach occurred in February 2026, exposing names, contact info, and health treatment details through Hims & Hers’ third-party customer service platform. The breach lasted from February 4 to 7, as detailed in the FTC complaint, raising questions about the company's cybersecurity controls.
Separately, the Food and Drug Administration (FDA) issued a warning letter in September 2025 addressing Hims & Hers’ marketing of compounded semaglutide products. These are pharmacy-mixed versions of diabetes drugs, which the FDA said were misleadingly presented as equivalent to FDA-approved branded therapies like Ozempic and Wegovy.
This FTC action follows similar enforcement targeting health tech companies that improperly share sensitive data. For example, the FTC previously settled with BetterHelp, a mental health platform, over unauthorized data sharing involving advertising partners.
Legal and compliance teams should view this case as a cautionary example. It underscores the necessity of transparent consumer consent practices and close vendor oversight when handling sensitive patient data, especially when shared with large advertising entities like Meta and Snap.
By the numbers:
- 4,244 — consumer complaints to Better Business Bureau about Hims & Hers over three years
- February 4-7, 2026 — dates of data breach exposing patient info
- September 2025 — FDA warning letter issued to Hims & Hers regarding drug marketing