FTC Lawsuit Against Hims & Hers Targets Data Sharing and Subscription Traps

The FTC, joined by Utah and California, filed suit Wednesday in federal court in California against telehealth retailer Hims & Hers, alleging the company transmitted patient health data to Meta, Snap and additional advertising platforms while embedding subscription traps inside its checkout flow. For e-commerce operators running DTC subscription models in health-adjacent verticals, the complaint reads as a public schematic of what regulators now treat as a non-compliant acquisition loop.

The data pipeline under fire

According to the FTC, Hims & Hers shared intake-form information — conditions submitted via online questionnaires — through tracking pixels and customer-list uploads, despite explicit privacy assurances. The complaint identifies Meta and Snap among the recipients and frames the disclosure as a direct breach of the company's stated data-handling commitments.

Components named in the filing:

• Tracking technology that logged on-site actions tied to health intake forms.
• Customer lists pushed to ad platforms for audience targeting.
• Additional third parties beyond Meta and Snap, per the FTC's allegations.

For performance marketers, the operative pattern is recognizable: pixel-based attribution and audience matching running on top of data the publisher promised not to share. The regulator's framing treats that combination as a deceptive practice, not a technical gray area.

Subscription mechanics flagged as deceptive

The complaint targets the billing architecture itself. Customers were told a provider would review their case before any charge; the FTC alleges most were billed shortly after form submission with no consultation. Recurring prescriptions enrolled without explicit approval, and refill disclosures were absent or buried.

After Hims & Hers introduced an online cancellation path in 2023, the cancel action reportedly remained obscured behind an "add or remove items" toggle and required multiple additional steps. Christopher Mufarrige, Director of the FTC's Bureau of Consumer Protection, characterized the result as consumers "unknowingly locked into recurring subscriptions" alongside unauthorized health-data disclosure.

Compliance signal for DTC operators

The lawsuit cites federal laws governing deceptive practices and recurring negative-option billing, plus consumer protection statutes in Utah and California. Three enforcement bodies acting in concert marks a structural escalation, not a single-state filing.

Pros for compliant operators: cleaner positioning on privacy and cancellation UX; reduced pressure from competitors running aggressive dark-pattern funnels.

Cons: elevated regulatory scrutiny on health-adjacent DTC, pixel-based retargeting against sensitive intake data, and any subscription mechanic that requires more than two steps to exit.

Track next: the docket's discovery phase, any FTC consent decree terms, and whether Meta and Snap face parallel inquiries as named data recipients.