Hims & Hers Is the Latest Warning That Marketing Data Is No Longer "Just Marketing Data"

When marketers think about compliance, the focus is often on the message itself. Are claims accurate? Are disclosures clear? Has legal approved the copy?

The FTC's latest lawsuit against Hims & Hers suggests those questions are no longer enough.

Filed alongside the states of California and Utah, the complaint alleges the telehealth company shared consumers' sensitive health information with advertising platforms while making misleading privacy promises. It also challenges aspects of the company's subscription enrollment and cancellation experience. Hims & Hers has denied the allegations and says it intends to vigorously defend itself.

While the case will ultimately be decided in court, it reinforces a broader trend we've seen across recent FTC enforcement actions: regulators are paying closer attention to the systems behind marketing, not just the campaigns customers see.

For marketing teams, that's a significant shift.

The FTC Says Marketing Technology Is Part of the Customer Experience

The FTC's complaint goes beyond advertising copy. Instead, it examines how customer data allegedly moved through Hims & Hers' marketing ecosystem.

According to the complaint, the company allegedly shared sensitive health information with third-party advertising platforms, despite telling customers their information would remain private. Regulators also argue that some subscription and billing practices could mislead consumers.

The complaint highlights a growing reality for marketers: customer trust isn't shaped only by your messaging. It's also influenced by the technologies collecting data, the platforms receiving it, and the workflows running behind every campaign.

As marketing stacks become more connected, compliance expectations are expanding alongside them.

Why This Matters Even If You're Not in Healthcare

Healthcare companies naturally face stricter privacy expectations, but the lessons from this case extend far beyond the industry.

Most modern marketing teams rely on dozens of connected tools that exchange customer information every day. That includes CRMs, email platforms, analytics tools, advertising networks, customer data platforms, and AI-powered marketing software.

Each connection creates another opportunity for data to move beyond its original purpose.

The question regulators increasingly appear to be asking is simple: Does your marketing operation actually match the promises you're making to customers?

That's a question every regulated business should be prepared to answer.

Your Biggest Compliance Risk Might Be Your Marketing Stack

Marketing technology has become incredibly powerful, but it has also become incredibly complex.

A single customer interaction might trigger website analytics, advertising pixels, CRM updates, automated email sequences, audience syncing, and AI-driven personalization within seconds.

Individually, each tool may seem low risk.

Together, they create a network of data sharing that's often difficult to fully understand.

That's why marketing teams should regularly review:

• Which third-party tools collect customer data.

• Where customer information is shared.

• Whether consent covers every intended use.

• If privacy policies accurately reflect actual workflows.

Visibility is becoming just as important as creativity.

Compliance Can No Longer Be Someone Else's Job

Privacy was once viewed primarily as a legal or IT responsibility.

Today, marketers influence many of the decisions regulators now examine, from personalization strategies and audience targeting to subscription flows and customer communications.

That doesn't mean marketing teams need to become privacy lawyers.

It does mean they should understand how campaigns are powered, what data is being collected, and whether internal processes support the commitments made to customers.

The closer marketing works with legal, compliance, and product teams, the easier it becomes to identify potential issues before they become regulatory ones.

The Future of Marketing Compliance Is Operational

Whether the FTC ultimately succeeds in its case against Hims & Hers or not, the lawsuit highlights an important shift in regulatory thinking.

Compliance is no longer limited to ad copy or claim substantiation.

It's becoming an operational discipline that spans customer data, marketing technology, consent management, subscriptions, and the entire customer journey.

For regulated organizations, the goal isn't to stop innovating or collecting valuable customer insights. It's to build marketing systems that are transparent, accountable, and aligned with the promises made to customers.