FTC Sues Hims & Hers Over Data Privacy Violations and Deceptive Billing Practices
The Federal Trade Commission (FTC) has initiated legal action against telehealth provider Hims & Hers, citing serious allegations of sharing sensitive customer health data with major advertising platforms and employing deceptive billing practices. This lawsuit, officially filed in the U.S. District Court for the Northern District of California, identifies considerable concerns surrounding the protection of customers’ private health information and the trustworthiness of Hims & Hers across various service facets.
According to the FTC complaint, Hims & Hers has reportedly transmitted health information regarding customers’ medical conditions to prominent advertising platforms like Meta and Snap. This sharing occurred through the utilization of online tracking technologies and customer lists, despite the company’s previous assurances of providing a secure and private service experience. The nature of these accusations raises significant alarms about the confidentiality measures that telehealth providers are expected to uphold in a sector where privacy is paramount.
Hims & Hers operates primarily as an online platform that offers treatments for a range of health conditions, including male pattern baldness, erectile dysfunction, obesity, and mental health disorders. The complaint outlines that the company assured its consumers that their sensitive health information would only be accessible to medical professionals directly involved in their care, with explicit promises that any third-party disclosure would require customer consent. However, the FTC claims these assurances were misleading. The company allegedly shared customers’ personal health information with advertising platforms for the purpose of targeted marketing, contradicting their stated privacy policies and eroding customer trust.
In addition to privacy violations, the FTC’s complaint highlights claims of deceptive billing practices exercised by Hims & Hers. The company’s website informed customers that they would only incur charges if a prescription was issued following a consultation with a medical provider. However, the FTC alleges that many customers did not receive a consultation nor were given an opportunity to approve any recommended treatments prior to being charged. Instead, customers found themselves automatically enrolled in recurring subscription plans, which often resulted in surprise charges on their accounts.
Another troubling aspect of the complaint revolves around the lack of clarity communicated to customers regarding prescription refills. The FTC asserts that Hims & Hers failed to notify customers effectively about when their prescriptions would be refilled, thereby hindering their ability to cancel subscriptions before incurring charges for additional months’ worth of medication. The complexity of the billing practices described raises substantial questions about the transparency and ethics in healthcare billing procedures.
The cancellation process, as outlined in the FTC complaint, also posed considerable barriers for customers wishing to discontinue their subscriptions. Before April 2023, customers reportedly had to navigate the cumbersome process of contacting customer service via phone, email, or chat to initiate a cancellation. Although the company eventually introduced a website cancellation option, it remained obscured in a convoluted procedure requiring customers to search for the medication management section, deselect all prescribed medications, and complete a series of survey questions before their cancellation would be finalized. Even users accessing the service through a mobile app were unduly restricted, lacking a straightforward cancellation option.
In light of these allegations, the FTC, in collaboration with authorities from California and Utah, is pursuing various remedies. The commission seeks injunctions to halt these practices, monetary relief for affected consumers, and civil penalties for apparent violations of consumer protection laws. This case serves as yet another example of healthcare providers’ failures to adequately protect sensitive health data and adhere to transparent data handling processes.
Professionals in the fields of security and privacy should take note of this case, as it accentuates the growing need for healthcare providers to safeguard sensitive health information and uphold the privacy standards that customers expect. It is critical for organizations handling health information to revisit their data-sharing agreements with advertising platforms and ensure compliance with the privacy commitments promised to their customers.
In summary, the unfolding legal situation between the FTC and Hims & Hers poses important implications for privacy practices within the healthcare sector and serves as a reminder of the need for vigilance in protecting patient information in an increasingly digital age.