Hims has disputed the allegations, stating that the FTC disregarded evidence from its three-year investigation and signaling it will mount a defense. The specific details of how customer data was transmitted to ad platforms and the scope of information shared remain subject to further disclosure in litigation.
This multi-state enforcement action targets two overlapping regulatory concerns: health-data privacy and subscription dark patterns. For attorneys advising digital health companies, the case signals intensifying scrutiny of business models that monetize user medical data while offering consumer-facing health services. Practitioners should review how clients handle health information under HIPAA, state privacy laws, and FTC standards—particularly any data sharing with third-party platforms for advertising purposes.