The Hims & Hers privacy lawsuit alleges that Hims & Hers Health, a telehealth provider, shared customers' sensitive health information about medical conditions with third-party advertising platforms. The conditions described are erectile dysfunction, hair loss and baldness, mental-health disorders, and obesity and weight management, including GLP-1 weight-loss care. The FTC, joined by Utah and California through Los Angeles County Counsel, filed the case on July 29, 2026, according to the FTC press release. The case also alleges deceptive billing and cancellation practices.
Official resources:
- Read the official guidance from FTC — Use this primary source to verify the official guidance.
- Explore the official data from FTC — Use this primary source to review the underlying data.
Table of Contents
- Which health information was named?
- Which companies allegedly received the data?
- How was the information allegedly transferred?
- Does this mean every diagnosis was disclosed?
Which health information was named?
The central allegation concerns sensitive information tied to the reason a person sought care. That includes treatment interest for erectile dysfunction, hair loss, mental-health conditions, obesity, and GLP-1 weight-loss treatment.
The concern is condition-linked data, not general website visits. The FTC alleges the information was shared for targeted advertising despite privacy promises. Hims had described its service as "100% online, private, and secure," while allegedly providing sensitive customer health details to advertising systems.
Which companies allegedly received the data?
The complaint names Meta Platforms and Snap as recipients, according to the FTC case page. It also refers to additional advertising platforms receiving customer data.
Readers should not assume only two companies were involved. The distinction matters because an advertising recipient can combine a customer list or browsing signal with its own account and behavior data. That combination is why health-related advertising disclosures receive close regulatory attention.
How was the information allegedly transferred?
Two transfer methods are alleged. One was uploading lists of certain customers to advertising platforms.
The other was transmitting health information through online tracking technologies, including Meta and Snap pixels, as described in The Register report. The methods matter for different reasons:.
- A customer list can connect named account groups to advertising tools.
- A pixel can send page activity and related health signals automatically during browsing.
- Either path can support targeted advertising without the customer expecting disclosure.
Does this mean every diagnosis was disclosed?
No. These remain unproven allegations in a pending federal case in the Northern District of California.
They are not a finding that every customer's diagnosis was disclosed or that every visitor was affected equally. For compensation watchers, the current public development is enforcement litigation, not a consumer payout. After the July 29, 2026 announcement, Hims shares fell $4.32, or 14.73%, to $25.00, fueling separate investor lawsuits over undisclosed privacy risk, according to the investor alert.