Summary
Official FTC press release announcing a proposed order against BetterHelp, the online counseling platform. BetterHelp shared users’ sensitive mental health data — including intake questionnaire responses about depression, suicidal thoughts, and medications — with Facebook, Snapchat, Criteo, and Pinterest for advertising purposes, despite explicit privacy promises. The settlement requires $7.8 million in consumer refunds and bans health data sharing with advertisers.
Key Points
- BetterHelp collected highly sensitive health data through intake questionnaire: depression history, suicidal ideation, current medications.
- Despite explicit privacy promises (“data only used for counseling services”), shared users’ email addresses, IP addresses, and health questionnaire data with Facebook, Snapchat, Criteo, and Pinterest.
- Used intake data to create Facebook “lookalike audiences” — targeting people similar to existing users with mental health vulnerabilities. This practice brought in tens of thousands of new paying users.
- First FTC action returning funds to consumers whose health data was compromised.
- Settlement terms: $7.8M in refunds to consumers (August 2017–December 2020 signup period); ban on sharing health data for re-targeting; must obtain affirmative express consent before sharing personal information; must direct third parties to delete shared health data; comprehensive privacy program required.
- BetterHelp falsely denied news reports about its data sharing practices in 2020.
- Commission voted 4-0 to accept the consent agreement.
- Samuel Levine (FTC Bureau of Consumer Protection Director): “BetterHelp betrayed consumers’ most personal health information for profit.”
Newsletter Angles
- The moment of therapeutic vulnerability as the exploitation vector: people sharing they’ve had suicidal thoughts or are on psychiatric medication were immediately added to ad targeting pools. The intake form — the first act of seeking help — was the data extraction mechanism.
- This is structural, not accidental: BetterHelp’s business model required growth; Facebook’s lookalike audiences were the cheapest growth tool; health data was the raw material. The privacy violation was optimal from a business perspective.
- The distinction between “advertising promises” and actual consent: BetterHelp’s terms technically permitted some data sharing, but they explicitly promised otherwise in onboarding copy. The breach was in the gap between displayed promises and actual practice.
Entities Mentioned
- BetterHelp — defendant; online counseling platform
- Meta — received health data for advertising targeting
- FTC — enforcement body; issued complaint and 4-0 settlement vote
- Snapchat — also received health data
- Samuel Levine — FTC Bureau of Consumer Protection Director; quoted in press release
Concepts Mentioned
- Data Privacy Weaponization — health data used as advertising raw material
- Mental Health Technology — the structural vulnerabilities of commercial mental health apps
Quotes
“When a person struggling with mental health issues reaches out for help, they do so in a moment of vulnerability and with an expectation that professional counseling services will protect their privacy. Instead, BetterHelp betrayed consumers’ most personal health information for profit.” — Samuel Levine, FTC
Notes
Primary source document (government press release). The $7.8M figure is a refund to users, not a fine — notable that the FTC characterized this as the first action returning funds to affected health data breach victims. The consent agreement is limited to data sharing for advertising; BetterHelp can still share data for other purposes with consent.