Consumer Health AI

State of play.

• Major AI platforms have converged on consumer health as a primary use case. Microsoft's Copilot Health (launched March 2026) joins OpenAI's ChatGPT Health and Anthropic's Claude for Healthcare — all three consumer-facing AI health tools now active simultaneously, aggregating EHR data, wearables, and lab results for millions of users .
• The "not a diagnosis" disclaimer is the current industry-standard liability shield, but Microsoft's own data shows nearly one in five Copilot Health conversations involve symptom assessment or condition discussion — a gap between stated function and actual use that regulators and plaintiffs' counsel will scrutinize .
• Google's entry into screenless fitness trackers with the Fitbit Air — priced at $99 with Google Health integration — accelerates the commoditization of continuous biometric monitoring and expands the population of consumers generating 24/7 health data streams, with consolidation pressure on smaller players .
• FDA's removal of black-box warnings on menopausal hormone replacement therapy has created a marketing environment that physicians are publicly flagging as a misinformation risk, with a proliferation of consumer products exploiting the regulatory shift .
• For counsel advising consumer health AI platforms, wearable manufacturers, or digital health companies, the practical baseline is that the regulatory framework has not kept pace with the product landscape — HIPAA, FTC Act, and state consumer protection statutes are the operative enforcement tools, and none were designed for AI-aggregated health data at consumer scale.

Where things stand.

• Three major AI platforms are now competing in consumer health data aggregation. Microsoft Copilot Health integrates data from over 50,000 U.S. hospitals and provider organizations, more than 50 wearable devices, and diagnostic lab partners — with a physician advisory panel of 230 clinicians from 24 countries assembled for safety review .
• No AI-specific federal regulatory framework governs consumer health AI. Existing enforcement vectors are HIPAA (where a covered entity or business associate relationship exists), FTC Act Section 5 (unfair or deceptive practices), and state consumer protection statutes. FDA's digital health framework applies where the tool meets the definition of a medical device — a threshold these platforms are designed to avoid.
• Microsoft's voluntary commitments — ISO/IEC 42001 certification and a no-training-data pledge — are emerging as de facto baseline expectations. Whether competitors match them and whether regulators codify them as minimum standards is the open question .
• The screenless wearable category has moved from niche to mainstream. Sales of screenless trackers surged 88% between 2024 and 2025, and Google's Fitbit Air launch at $99 — roughly one-third the cost of established competitors — signals the category has reached a scale where data governance, platform integration, and subscription-model regulation become live advisory issues .
• FDA's HRT labeling change has opened a consumer marketing window that clinical societies including ACOG and the Menopause Society are publicly warning patients about — creating a documented record of physician concern that could support future enforcement or litigation theories .
• Direct-to-consumer pharmaceutical subscription models are an emerging contract and regulatory category. Novo Nordisk's Wegovy subscription for self-pay patients creates a manufacturer-to-patient relationship with its own informed consent, cancellation, and consumer protection exposure .

Latest developments.

• Google launched the Fitbit Air, a $99 screenless fitness tracker integrating heart rate, HRV, SpO2, and skin temperature with Google Health, entering a category where sales surged 88% between 2024 and 2025; the device launches May 26, 2026 .

Active questions and open splits.

• Where does consumer health AI sit in the FDA device framework? Platforms that aggregate data and identify patterns without diagnosing are designed to stay outside FDA jurisdiction — but the line between "pattern identification" and "clinical decision support" is unsettled, and usage data showing symptom-assessment conversations will be exhibit A in any reclassification argument .
• Does HIPAA cover AI health platforms when the user — not a provider — initiates data sharing? Copilot Health's integration with hospital EHR systems via HealthEx may create business associate relationships, but consumer-initiated aggregation through wearables and direct lab connections may fall outside traditional covered-entity analysis .
• Are voluntary no-training-data commitments enforceable? Microsoft's pledge not to use Copilot Health data for model training is a contractual and reputational commitment — but the enforcement mechanism, scope of "training data," and downstream licensing questions are undefined .
• Does Google Health's integration with Fitbit Air create a new data-aggregation exposure? Unlike standalone wearables, the Fitbit Air feeds continuous biometric data into Google's broader health platform — raising questions about secondary use, data-sharing with third parties, and whether the Washington My Health MY Data Act or similar state statutes apply .
• What consumer protection exposure attaches to HRT and menopause product marketing post-label change? The FDA's removal of black-box warnings does not affirmatively validate aggressive marketing claims; clinical society pushback creates a record that could support FTC or state AG enforcement against misleading advertising .
• Do pharmaceutical direct-to-consumer subscription models trigger state auto-renewal and subscription-cancellation statutes? Novo Nordisk's Wegovy subscription is a novel structure — manufacturer-direct, tiered, self-pay — that sits at the intersection of pharmaceutical distribution law and consumer subscription regulation .

What to watch.

• Whether FTC or HHS issues guidance specifically addressing consumer health AI data practices — Microsoft's voluntary commitments are the current market benchmark but have no regulatory force.
• Whether any state AG opens an investigation into consumer health AI platforms under existing health data privacy statutes — the Washington My Health MY Data Act remains the most likely vehicle.
• Whether FDA issues a digital health policy statement clarifying where AI health aggregation tools fall relative to the device definition — the three-platform competitive landscape and the expanding wearable data ecosystem make this a higher-priority regulatory question than it was 12 months ago.
• Whether Google's Fitbit Air launch and Google Health integration draw scrutiny from state privacy regulators or the FTC over secondary use of continuous biometric data.
• Whether clinical society warnings about HRT and menopause product marketing produce FTC enforcement actions or class action filings targeting specific advertising claims.
• Whether Novo Nordisk's subscription model prompts state pharmacy board or consumer protection scrutiny, and whether competitors in the GLP-1 space replicate the structure.