The Federal Trade Commission (FTC), in a joint action with the states of Utah and California, has filed a comprehensive lawsuit against the prominent telehealth provider Hims & Hers Health, Inc. The legal action, announced on Wednesday, alleges that the direct-to-consumer healthcare company engaged in a series of deceptive practices, including the unlawful sharing of sensitive consumer health data with third-party advertising platforms and the implementation of predatory billing and subscription models. This lawsuit marks a significant escalation in regulatory scrutiny over the telehealth industry, which has seen explosive growth and shifting legal boundaries since the onset of the COVID-19 pandemic.
Hims & Hers, a multi-billion-dollar entity listed on the New York Stock Exchange, operates a digital platform that offers treatments for a variety of conditions, ranging from hair loss and sexual health to anxiety and weight management. However, the FTC’s complaint suggests that the company’s rapid expansion was fueled, in part, by misleading consumers about the costs of its services and the privacy of their medical information. The legal challenge comes at a critical juncture for the company, which recently navigated a separate high-profile dispute regarding the sale of compounded GLP-1 medications.
Detailed Allegations of Deceptive Subscription Practices
At the heart of the FTC’s complaint is the allegation that Hims & Hers misled "hundreds of thousands of consumers" by enrolling them in unwanted and costly medication subscriptions without their explicit consent. According to the regulatory filing, the company’s online medical intake process was designed to create a false impression of the transaction’s finality.
The FTC argues that the intake forms led consumers to believe they were merely submitting information for a medical provider to review. Many users reportedly believed that this submission did not constitute a final purchase and that they would have the opportunity to review a provider’s recommendation before being charged. Instead, the complaint alleges that Hims & Hers routinely charged consumers for prescription treatments and enrolled them in recurring subscription plans almost immediately after the intake forms were submitted.
"Contrary to the company’s representations, consumers have virtually no opportunity to review the provider’s recommended treatment, much less consent to it," the FTC complaint states. "Accordingly, consumers have suffered, and continue to suffer, significant injury by being forced to pay for medical treatment that they did not consent to or wish to purchase."
Furthermore, the lawsuit alleges that Hims & Hers utilized deceptive advertising to imply that consumers could speak with a medical professional for free to determine if a treatment was appropriate. In reality, the FTC claims the company used these "free" consultations as a gateway to trigger automatic billing for prescription drugs.
The Use of "Dark Patterns" in Cancellations and Billing
The legal filing also takes aim at the company’s retention strategies, specifically its use of what regulators call "dark patterns"—user interface designs intended to manipulate users into making choices that are not in their best interest. The FTC alleges that Hims & Hers made it excessively difficult for customers to cancel their subscriptions once they realized they were being charged.
Prior to 2023, the complaint notes that customers could only cancel their recurring charges by navigating a complex process that required contacting customer service via phone, email, or live chat, with no automated self-service option. While the company eventually added an online cancellation button in 2023, the FTC argues that the feature was intentionally hidden and buried deep within the account settings to frustrate users and discourage them from ending their subscriptions.
Additionally, the lawsuit claims the company failed to provide clear and conspicuous disclosures regarding the dates on which customers would be charged for refills. This lack of transparency allegedly resulted in numerous "unwanted refill charges," as consumers were caught off guard by the timing of recurring payments.
Alleged Breaches of Health Data Privacy
Beyond billing disputes, the lawsuit raises grave concerns regarding the handling of sensitive medical data. Hims & Hers has long marketed its platform as a private and secure sanctuary for consumers to discuss sensitive health issues, such as erectile dysfunction, hair loss, and mental health struggles. The company’s privacy policy and marketing materials assured users that their information would only be accessible to medical providers and necessary personnel.
However, the FTC alleges that Hims & Hers bypassed these promises by integrating tracking technologies—commonly known as pixels—from major advertising platforms like Meta (the parent company of Facebook and Instagram) and Snap Inc. These pixels allegedly transmitted sensitive health information, including the specific treatments consumers were seeking and their medical intake responses, to the advertising giants to help Hims & Hers refine its targeted marketing campaigns.
Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection, characterized the situation as a "troubling scenario" where consumers were unknowingly locked into subscriptions while their most private health data was shared without consent. "The FTC will not hesitate to act on behalf of consumers deprived of their ability to choose which products they want and whether to keep their most sensitive health information private," Mufarrige said in an official statement.
Legal Framework and State-Level Involvement
The lawsuit is grounded in several federal and state statutes designed to protect consumers in the digital marketplace. The FTC alleges that the company’s practices violate the FTC Act, which prohibits unfair or deceptive acts, and the Restore Online Shoppers’ Confidence Act (ROSCA), a 2010 law that specifically regulates the use of "negative option" billing—a practice where a customer’s silence or failure to take an affirmative action to reject goods or services is interpreted as acceptance of the offer.
The involvement of Utah and California adds additional legal weight to the proceedings. Utah authorities argue that the company’s conduct violated the Utah Consumer Sales Practices Act, while California’s Attorney General alleges violations of the state’s False Advertising and Unfair Competition Laws. These state-level claims could potentially open the door for additional penalties and restitution for residents in those jurisdictions.
Response from Hims & Hers
Hims & Hers has responded to the lawsuit with a forceful denial, characterizing the legal action as an overreach by federal and state authorities. In a public statement, the company suggested that the regulators ignored evidence provided during a multi-year investigation.
"This lawsuit disregards substantial evidence we provided the FTC during its nearly three-year investigation, ignores established state laws and industry standards in telehealth, and contorts the law to try to manufacture claims," the company stated. "This is not enforcement grounded in consumer protection; it is an effort to generate headlines at our expense. We are confident in our position and will vigorously defend ourselves against these baseless claims."
The company maintains that its billing practices and data privacy protocols are in line with industry standards and that the telehealth model requires a streamlined approach to intake and prescription fulfillment to ensure patient access to care.
Context: A History of Legal and Market Challenges
This latest legal battle follows a period of intense scrutiny for Hims & Hers. In early 2026, the company was embroiled in a dispute with the pharmaceutical giant Novo Nordisk, the manufacturer of the blockbuster GLP-1 medications Ozempic and Wegovy. Novo Nordisk had sued Hims & Hers over its sale and marketing of compounded versions of these drugs, which are typically produced by pharmacies when a drug is in shortage.
While that specific lawsuit was dropped in March 2026 after Hims & Hers agreed to limit its sale of compounded GLP-1s, the episode highlighted the aggressive nature of the company’s market expansion. Analysts suggest that the pressure to maintain high growth rates in a competitive telehealth landscape may have contributed to the aggressive billing and marketing tactics now being challenged by the FTC.
Broader Implications for the Telehealth Industry
The outcome of this case could have far-reaching implications for the entire telehealth sector. For years, digital health startups have operated in a relatively permissive environment, leveraging the convenience of the internet to bypass traditional pharmacy and clinic models. However, the FTC’s focus on Hims & Hers suggests that the "move fast and break things" ethos of Silicon Valley is clashing with the stringent regulatory requirements of the healthcare industry.
Key areas of concern for the broader industry include:
- Privacy Tracking: The FTC has recently taken action against other health-tech firms, including BetterHelp and GoodRx, for similar uses of tracking pixels. This lawsuit reinforces the message that the FTC considers medical query data to be highly sensitive and protected, even if the platform is not technically a "covered entity" under HIPAA.
- Subscription Transparency: Regulators are increasingly skeptical of "one-click" enrollments that lead to recurring charges. Telehealth companies may be forced to redesign their intake funnels to include more explicit "double opt-in" confirmations for subscriptions.
- The Role of Compounding: As Hims & Hers and its competitors increasingly rely on compounded medications to navigate drug shortages and high prices, the legal boundaries of how these drugs are marketed and sold remain a point of contention between regulators, legacy pharmaceutical companies, and telehealth providers.
As the legal proceedings move forward in the federal court system, investors and consumers alike will be watching closely. Hims & Hers faces not only the prospect of significant financial penalties and mandatory changes to its business model but also a potential erosion of consumer trust in an industry where privacy and transparency are the foundations of the patient-provider relationship.
