A federal lawsuit filed on July 29, 2026, against telehealth company Hims & Hers turns a familiar online-health routine into a national legal warning: the same intake form used to seek treatment may also trigger a charge, a recurring subscription, and the transfer of sensitive health information to advertising platforms.
The Federal Trade Commission, joined by Utah and California officials through the Los Angeles County Counsel, alleges that Hims & Hers misled consumers about three basic promises: when they would be charged, how easily they could cancel, and whether their medical information would remain private. The case was filed in the U.S. District Court for the Northern District of California.
According to the complaint, customers were told they could connect with a medical provider to determine whether a prescription was appropriate. But the FTC alleges that most consumers were charged and enrolled in a treatment subscription soon after submitting an online intake form, often before speaking with a provider or approving a prescription. The agency also says refill timing was not clearly disclosed, increasing the risk of surprise monthly charges.
The cancellation allegations are especially revealing. Before 2023, the complaint says, many customers had to contact the company by phone, email, or chat to end their subscriptions. After online cancellation became available, the FTC alleges that the cancellation button was concealed behind several screens and appeared only after users selected an option to add or remove items from an order.
That design may look like a customer-service annoyance, but federal law treats subscription obstruction differently. The Restore Online Shoppers’ Confidence Act requires clear consent and accessible cancellation procedures for recurring online charges. If the allegations are proven, the dispute could reinforce a broader enforcement principle: companies cannot advertise frictionless digital enrollment while making the exit deliberately difficult.
The privacy claims carry even greater stakes. The FTC alleges that Hims & Hers shared health-related information with third-party advertising platforms, including Meta and Snap, despite promising consumers that their information would be protected. The complaint describes both customer lists and tracking technologies that transmitted website activity, or “Events,” to outside platforms.
For consumers, the details matter. A visit to a health website can reveal interest in conditions involving sexual health, hair loss, mental health, weight management, or other deeply personal concerns. Even when a name is not displayed, data tied to accounts, browsing behavior, devices, or advertising profiles can create an intimate picture of a person’s life.
The lawsuit also signals a sharper enforcement priority. Regulators are no longer looking only at data breaches or obviously false medical claims. They are examining the full digital experience: the advertisement, the intake form, the payment screen, the subscription renewal, the cancellation path, and the tracking code running behind the page.
Hims & Hers has not been found liable. The FTC says it filed the complaint because it had reason to believe the company was violating or about to violate the law, and the court will decide the case.
The larger takeaway is immediate: telehealth companies may have to treat privacy, billing, and interface design as one legal problem rather than three separate business functions. For millions of online healthcare users, the next question before clicking “submit” is no longer just whether treatment is available. It is what else the button sets in motion.