Telehealth Scrutinized for Data Privacy Lapses

The convenience of telehealth, promising rapid prescription fulfillment, has led to a boom in online health services. These platforms offer quick access for conditions like ADHD and anxiety. However, government regulators are increasingly flagging unethical practices, such as disclosing customer health data and enrolling users in hard-to-cancel subscriptions without proper consent.

The Federal Trade Commission has filed lawsuits against major telehealth providers, including Hims & Hers, alleging violations of consumer protection laws. Similar cases have targeted companies like BetterHelp and GoodRx for sharing user data with platforms like Meta and Google without permission. Experts highlight that federal health privacy laws like HIPAA generally do not apply to these direct-to-consumer telehealth companies.

Many telehealth visits rely heavily on questionnaires, with limited actual physician interaction. Some services automatically enroll patients in recurring prescriptions, often without a clear review opportunity. For critical medications like GLP-1 drugs, less than a third of online platforms require real-time consultations, leading to potential risks and inadequate patient care. Concerns about eating disorders, which these drugs can exacerbate, are often overlooked.

Sensitive health information shared with telehealth companies may be disclosed to advertisers and other third parties, as HIPAA protections are limited. The FTC often uses broader authority against deceptive business methods, but penalties can be lenient. While some states are enacting stronger online privacy laws, enforcement remains a challenge. Privacy experts suggest using ad blockers and private browsers, and carefully reading user agreements to mitigate risks, though ultimate data control remains limited for consumers.