In March 2023, the Federal Trade Commission (FTC) announced a $7.8 million settlement with BetterHelp, one of the nation’s largest online therapy platforms, for illegally sharing sensitive mental health information with social media companies and advertising networks. The settlement came after the FTC discovered that BetterHelp had been disclosing users’ email addresses, IP addresses, and detailed health information to Facebook, Snapchat, and other third parties without obtaining proper consent from consumers. This violation exposed millions of people who sought mental health support to targeted advertising based on their most personal struggles and diagnoses. The case represents one of the largest privacy settlements involving health information shared for advertising purposes.
For example, someone who used BetterHelp to seek help for depression or anxiety could have found themselves seeing ads specifically targeted to them based on that sensitive health data—a practice that violates both consumer trust and federal privacy law. The settlement not only required BetterHelp to pay substantial penalties but also established permanent restrictions on how the company can handle consumer data moving forward, including obtaining explicit consent before sharing any personal information with third parties. Since the settlement’s announcement, affected consumers have begun receiving refunds. The FTC distributed nearly $5.2 million in the first round of payments in June 2024, followed by a second round of over $2.6 million to more than 534,000 additional consumers. These refunds represent part of the company’s obligation to make amends for years of unauthorized data sharing that put users’ mental health privacy at risk.
Table of Contents
- What Privacy Violations Led to the BetterHelp Settlement?
- Settlement Details and FTC Approval Timeline
- What Sensitive Data Did BetterHelp Share?
- How Are Refunds Being Distributed to Affected Consumers?
- What Permanent Restrictions Does BetterHelp Now Face?
- How Does the BetterHelp Case Fit Into Broader Privacy Concerns?
- Lessons and Future Implications for Digital Health Privacy
What Privacy Violations Led to the BetterHelp Settlement?
BetterHelp’s core violation centered on its practice of collecting extensive personal health information from users during the therapy intake process and then sharing that data with advertising partners without proper disclosure or consent. The platform asked users detailed questions about their mental health conditions, treatment history, and personal struggles. Instead of keeping this information confidential, BetterHelp configured its systems to send this sensitive data to Facebook’s and Snapchat’s advertising platforms, allowing these companies to create detailed profiles of BetterHelp users for targeted marketing purposes. The sharing occurred through several mechanisms, including the use of pixel tracking technology that monitored user behavior and the direct transmission of user information to third-party advertising networks. This meant that BetterHelp wasn’t just collecting health data—it was actively monetizing it by selling access to advertisers.
A person seeking treatment for anxiety, for instance, could have their information transmitted to Facebook, which would then use that data to show them targeted ads for anxiety-related products, supplements, or competing services. The FTC found that BetterHelp failed to clearly disclose these practices in its privacy policy and that many users believed their health information would remain confidential. The violations also extended to how BetterHelp handled data it collected through its website and marketing materials. Even individuals who never became actual therapy clients had their information shared with advertising partners. The FTC’s investigation revealed that BetterHelp had been aware of privacy concerns but prioritized advertising revenue over consumer protection, making this a case of deliberate disregard rather than inadvertent mishandling.
Settlement Details and FTC Approval Timeline
The FTC announced the settlement agreement in March 2023, but the process didn’t conclude immediately. The agency required additional review and public comment before issuing final approval, which came in July 2023. This four-month gap between announcement and final approval is standard for major FTC settlements and allows the agency to ensure all terms are properly structured and enforceable. The $7.8 million settlement amount was allocated based on several factors, including BetterHelp’s revenue, the number of affected consumers, and the extent of the violations. the $7.8 million figure isn’t purely a penalty in the traditional sense.
A significant portion of these funds was designated specifically for consumer refunds rather than going solely to the government. This distinction matters because it ensures that people directly harmed by the privacy violations receive compensation. However, one limitation of the settlement is that not all affected consumers could be identified or located. BetterHelp’s records didn’t clearly track when data sharing began in all cases, which complicated the refund distribution process and meant some consumers may not have known they were eligible for compensation. The settlement’s structure also included non-monetary remedies, meaning BetterHelp faced operational restrictions beyond just paying money. These permanent injunctions effectively reshaped how the company operates its privacy and data-handling practices going forward, restricting the company’s ability to monetize user data in ways it previously had.
What Sensitive Data Did BetterHelp Share?
The types of information BetterHelp shared with third parties went far beyond what users reasonably expected. The company transmitted email addresses, phone numbers, IP addresses, zip codes, and detailed information about users’ mental health conditions, including specific diagnoses, treatment histories, and the types of therapy users were seeking. This information was shared directly with Facebook and Snapchat, which used it to build advertising profiles—essentially creating a detailed map of each user’s mental health status. One concrete example of the harm this caused: A woman seeking therapy for postpartum depression might have her condition information transmitted to advertisers, who would then target her with ads for parenting products, postpartum recovery services, or even other mental health platforms.
While these ads might seem relevant, the underlying issue is that her sensitive health information was shared without her knowledge or consent to enable that targeting. Worse, this information could be retained by the advertising platforms indefinitely, creating permanent records of health conditions disclosed in what users believed was a confidential therapeutic relationship. The FTC also found that BetterHelp shared data with other third parties beyond Facebook and Snapchat, including web analytics companies and data aggregators. Some of this information was shared through tracking pixels embedded in BetterHelp’s website—technology that tracks user behavior across the internet without explicit consent. This practice essentially gave BetterHelp’s partners a window into not just what users disclosed in therapy, but also their broader online behavior and interests.
How Are Refunds Being Distributed to Affected Consumers?
The FTC implemented a two-phase refund process for BetterHelp consumers. In the first phase, which began in May 2024 with notices sent to consumers, approximately $5.2 million was distributed to affected users in June 2024. The initial refund amounts varied based on when users had accounts, how long they used the service, and whether they had paid subscription fees. Users who paid for therapy sessions received refunds reflecting their payments, while those who used free trial periods or only the matching service received smaller amounts. The second refund distribution, which occurred later in 2024, benefited more than 534,000 consumers who had already accepted their first refund. This additional payment of over $2.6 million was possible because the FTC had set aside funds for consumers who couldn’t be immediately located or identified.
As those funds were claimed or as verification processes identified additional eligible consumers, subsequent payments were distributed. For consumers, the refund process has been largely automatic—those with identifiable contact information received notices with instructions for claiming their share, and many received direct deposits without having to file additional claims. However, there’s an important limitation to the refund program: not every BetterHelp user has been compensated equally, and some may not have received full refunds of what they paid. The settlement pool was divided among a very large number of consumers, and the total payout ($7.8 million) had to be spread across potentially millions of affected individuals. This meant that individual refund amounts, while meaningful, weren’t necessarily equivalent to full restitution of original payments. Additionally, consumers had to have sufficient identifying information in BetterHelp’s records to be located and contacted about the refund opportunity.
What Permanent Restrictions Does BetterHelp Now Face?
As part of the final FTC order, BetterHelp faces binding restrictions that fundamentally limit how it can handle consumer data for the foreseeable future. Most significantly, the company is permanently banned from sharing consumer health data for retargeting and advertising purposes. This means BetterHelp cannot use information about users’ mental health conditions, treatment preferences, or therapy history to help advertisers target those users with ads. Additionally, BetterHelp must obtain affirmative, express written consent before sharing any personal information with third parties—a much higher standard than the vague disclosures the company had previously used. BetterHelp is also required to implement and maintain a comprehensive information security and privacy program that includes rigorous data retention limits. The company must now minimize the personal information it collects, retain consumer data for only as long as necessary for the stated purpose, and implement strong access controls to prevent unauthorized sharing.
These requirements are ongoing and subject to FTC monitoring and enforcement. If BetterHelp violates these restrictions, it could face additional fines and enforcement action. The warning here for consumers is clear: even with these restrictions, users should carefully review what information they share with any online therapy platform and understand how it will be used. The FTC order also requires BetterHelp to conduct regular privacy impact assessments and to maintain documentation of its data-handling practices. The company must report to the FTC regularly about its compliance with the order. This level of oversight creates accountability but also means that BetterHelp’s operations have become substantially more regulated and restricted compared to its practices before the settlement.
How Does the BetterHelp Case Fit Into Broader Privacy Concerns?
The BetterHelp settlement highlights a troubling pattern in tech and digital health: the willingness of companies to monetize sensitive health information for advertising revenue. Mental health platforms occupy a particularly vulnerable space because users disclose their most intimate struggles with the expectation of confidentiality. When those disclosures are monetized and shared with advertisers, it represents a fundamental betrayal of the therapeutic relationship and consumer trust. The BetterHelp case demonstrates that this wasn’t an isolated incident but rather a deliberate business practice aimed at maximizing advertising revenue.
The settlement also reveals how older privacy laws and policies failed to protect consumers adequately. BetterHelp’s privacy policy did include some disclosures about data sharing, but they were vague enough that most consumers didn’t understand the full extent of how their information was being shared and used. The FTC’s action pushed for much clearer disclosures and affirmative consent requirements, effectively raising the bar for all online health and therapy platforms going forward. Other telehealth and mental health apps took notice of the settlement and have since tightened their own data-handling practices to avoid similar violations.
Lessons and Future Implications for Digital Health Privacy
The BetterHelp settlement serves as a watershed moment for digital health privacy. It established that the FTC will aggressively pursue cases involving sensitive health information shared for advertising purposes, even when companies argue they have some level of user disclosure. The message to other healthcare technology companies is clear: health data is not a legitimate revenue stream through advertising networks, and the cost of violating consumer privacy in this space is significant.
Several other telehealth companies have subsequently reviewed and updated their privacy practices in response to the BetterHelp enforcement action. Looking forward, the settlement raises questions about how other online mental health platforms and digital health services handle similar data. Consumers using any telehealth service should independently verify how their information is handled, request copies of privacy policies, and understand what consent they’re actually giving when they use these platforms. The BetterHelp case also prompted broader discussions about whether the current regulatory framework is sufficient to protect health information in a digital age, or whether more comprehensive federal privacy legislation is needed to prevent similar abuses.
You Might Also Like
- Marriott Starwood $52 Million Data Breach Settlement
- Motel 6 Guest Data Sharing ICE Class Action Settlement
- Headspace Subscription Auto-Renewal Class Action
Open Settlements You Can Claim Now
Browse current class action settlements accepting claims — several require no proof of purchase: