If you had a Cerebral account with a California address and received a data incident notification around March 6, 2023, you likely qualify for the Cerebral Pixel and Tracking Settlement — a $500,000 class action fund tied to the company’s use of Meta Pixel tracking on its website. Separately, if you were among the roughly 3.2 million consumers whose sensitive health data Cerebral shared with third parties like Facebook, TikTok, Snapchat, and LinkedIn, you may have already received a refund check as part of a larger $7 million FTC and DOJ federal settlement. These are two distinct legal actions, and understanding which one applies to you matters.
The class action, formally known as *Doe I and Doe II v. Cerebral, Inc.*, centers on the allegation that Cerebral embedded the Meta Pixel on its platform and, in doing so, disclosed personal information to Facebook without user consent. The FTC case goes broader, covering years of data-sharing practices that exposed medical histories, prescription information, mental health assessment answers, and more.
Table of Contents
- Who Qualifies for the Cerebral Pixel Class Action Settlement?
- What Did Cerebral Actually Share, and How Did Tracking Pixels Cause the Breach?
- The FTC and DOJ Federal Settlement — A Separate, Larger Action
- How to File a Claim and What to Expect in Payment
- Opting Out, Objecting, and What You Give Up by Staying In
- The Broader Pattern of Pixel-Based Health Data Breaches
- What Comes Next for Cerebral Users and Data Privacy Enforcement
Who Qualifies for the Cerebral Pixel Class Action Settlement?
The class in *Doe I and Doe II v. Cerebral, Inc.* is narrowly defined. You qualify if you meet all of the following criteria: you held a Cerebral, Inc. account, your account was associated with a California address, and you received a data incident notification letter on or about March 6, 2023. That notification was sent either by email or mailed postcard and specifically referenced a “Website Usage Disclosure.” If you did not receive that notice, or if your account was registered in another state, you are not part of this particular class. This is a key distinction that trips people up.
The Cerebral Pixel class action is a California-only settlement. Someone in Texas or new York who also had a Cerebral account and whose data was also shared via the Meta Pixel does not qualify for this $500,000 fund. Their recourse, if any, would fall under different legal avenues — potentially individual lawsuits or other state-level actions. The FTC settlement, discussed below, has a much wider scope, but the payout structure and process are entirely separate. For those who do qualify, the settlement offers a pro-rata share of approximately $267,000 — the amount remaining after attorneys’ fees of roughly $198,000, expenses of about $25,000, and service awards of around $10,000 are deducted from the $500,000 total. Claimants also receive a $300 credit toward a self-pay Cerebral Therapy and Medication plan, though that credit is obviously only useful if you intend to continue using Cerebral’s services.
What Did Cerebral Actually Share, and How Did Tracking Pixels Cause the Breach?
The core issue in both the class action and the FTC case is the same technology: tracking pixels. Cerebral embedded the Meta Pixel — a small piece of JavaScript code provided by Facebook — on its website and app. When a user visited Cerebral’s site, logged in, or filled out intake forms, the pixel fired and transmitted data back to Meta. The problem is that this data included far more than just browsing behavior. According to the FTC’s findings, information shared with third parties included names, medical and prescription histories, home and email addresses, phone numbers, birthdates, demographic information, IP addresses, pharmacy and health insurance details, and even answers to mental health assessment questionnaires completed during onboarding. This was not limited to Meta.
Cerebral also used tracking tools from LinkedIn, Snapchat, and TikTok, meaning sensitive health data flowed to multiple advertising platforms. For a mental health telehealth company, this is particularly damaging. A user who signed up for help with anxiety or depression had no reasonable expectation that their prescription history or therapy intake answers would be packaged and sent to social media companies for ad targeting purposes. However, if you assume that simply having a Cerebral account means your specific data was shared in an identifiable way, that is not necessarily the case. Tracking pixels transmit data in varying degrees of specificity depending on how they are configured. Some users’ data may have been sent in aggregate or partially anonymized form, while others had directly identifiable information transmitted. The FTC complaint referenced nearly 3.2 million consumers as the affected scope, but the exact nature of exposure varied by individual.
The FTC and DOJ Federal Settlement — A Separate, Larger Action
The federal action against Cerebral resulted in a $7 million penalty, though the structure is more complicated than a single number suggests. The original civil penalty was $10 million, but the court suspended it to $2 million after determining Cerebral could not pay the full amount. On top of that, approximately $5.1 million was directed toward consumer refunds. As of May 2025, the FTC confirmed that more than $5 million in refunds had been sent to affected consumers. These refunds were not tied to the pixel tracking alone. The FTC’s case also involved Cerebral’s deceptive cancellation practices — making it difficult for users to cancel subscriptions and, in some cases, continuing to charge them.
So if you received a refund check from the FTC related to Cerebral, it may have been because of billing practices rather than, or in addition to, the data-sharing violations. A critical outcome of the federal settlement is a permanent ban. The FTC order permanently prohibits Cerebral from using or disclosing consumers’ sensitive information to third parties for marketing or advertising purposes. This is not a temporary restriction or a promise to do better. It is a binding legal prohibition. For consumers who are weighing whether to continue using Cerebral’s services — especially those with the $300 credit from the class action — this ban provides a baseline assurance that the same data-sharing practices will not recur, at least not legally.
How to File a Claim and What to Expect in Payment
For the class action settlement, claims needed to be submitted between January 22 and January 29, 2026 — a notably short filing window. Claims could be filed online through the official settlement site at cerebralpixelsettlement.com or submitted by email. If you missed that deadline, you are generally out of luck for this particular settlement. There is no late-filing mechanism described in the settlement terms. The actual per-person payout from the class action depends entirely on how many valid claims were filed. With approximately $267,000 available and a potentially large class of California-based Cerebral users, individual payments could range from modest to minimal. If 1,000 people filed valid claims, each would receive roughly $267.
If 5,000 filed, that drops to about $53 per person. This is the tradeoff inherent in pro-rata distribution — the more people who file, the less each person receives. By contrast, the $300 Cerebral service credit is a fixed amount regardless of how many people claim it, but its value is zero to anyone who does not plan to use Cerebral again. For the FTC refunds, the process was handled differently. Consumers did not need to file a claim. The FTC identified affected individuals and sent refund checks directly, typically via PayPal or mailed check. If you believe you should have received a refund but did not, you can contact the FTC directly through their website.
Opting Out, Objecting, and What You Give Up by Staying In
The opt-out deadline for the class action was December 23, 2025. If you remained in the class — meaning you did not submit a written opt-out request by that date — you are bound by the settlement’s terms. This means you release Cerebral from further liability related to the pixel data-sharing claims covered by this case. You cannot later file your own individual lawsuit over the same conduct. This is worth understanding clearly. By accepting even a small pro-rata payment, you waive the right to pursue potentially larger individual damages.
For most class members, the economics make staying in the class the practical choice — individual lawsuits are expensive and uncertain. But if you had particularly severe consequences from the data exposure, such as documented identity theft or targeted harassment traceable to the disclosed information, opting out to pursue individual litigation might have been worth considering. That window has now closed. The final approval hearing was scheduled for March 9, 2026, at 9:00 a.m. Pacific Time in Department 304 of the San Francisco Superior Court, located at 400 McAllister Street, San Francisco, CA 94102. At that hearing, the court would decide whether to grant final approval of the settlement terms, including the attorneys’ fee allocation, which consumes roughly 40 percent of the total fund.
The Broader Pattern of Pixel-Based Health Data Breaches
Cerebral is not an isolated case. The use of tracking pixels on healthcare websites has triggered a wave of lawsuits and regulatory actions across the industry. Hospitals, telehealth platforms, and pharmacies have all been caught sharing patient data through Meta Pixel, Google Analytics, and similar tools.
The HIPAA Journal has documented settlements involving companies like RAYUS Radiology alongside Cerebral, signaling that regulators and plaintiffs’ attorneys are actively targeting this practice. For consumers, the takeaway is practical: if you have used any health-related website or app, there is a reasonable chance your data was shared with advertising platforms at some point. Browser-based tracking is pervasive, and healthcare companies were slow to recognize — or chose to ignore — the legal and ethical implications of embedding third-party tracking code on pages where patients enter sensitive information.
What Comes Next for Cerebral Users and Data Privacy Enforcement
The permanent ban imposed on Cerebral by the FTC sets a precedent that other telehealth companies will need to take seriously. Federal regulators have signaled that sharing health data with advertising platforms is not just a HIPAA concern but a consumer protection violation subject to significant penalties.
As more states adopt comprehensive privacy laws and the FTC continues to expand its enforcement posture, settlements like this one will likely become more common — and potentially larger. For current and former Cerebral users, the practical steps are straightforward: check whether you received the March 2023 notification letter, verify whether you filed a claim before the January 2026 deadline, and watch for any FTC refund communications if you have not already received one. Going forward, consider using browser extensions that block tracking pixels and review the privacy policies of any telehealth platform before entering health information.