What the FTC Alleged
The FTC alleged that GoodRx, a prescription-discount and telehealth platform, shared sensitive user data — including the medications people looked up and their health conditions, along with identifiers — with advertising and analytics companies such as Facebook, Google and Criteo, going back years, without adequately disclosing it. The agency said this violated the Health Breach Notification Rule, which requires notifying consumers when their health data is disclosed without authorization.
It was the first enforcement action the FTC brought under that rule, which made it a landmark for digital-health privacy.
The Settlement
In February 2023 GoodRx agreed to a $1.5 million penalty and to stop sharing user health data with third parties for advertising, and to obtain consent before sharing health information going forward. GoodRx said the FTC’s action focused on old practices it had already changed. A settlement resolves the government’s claims without a court finding of liability.
The case was announced alongside momentum that led to a similar, larger action against BetterHelp.
What It Means
GoodRx and BetterHelp together signaled that health-adjacent apps — not just hospitals and insurers — can be held accountable for where sensitive data flows. For users, medication searches and health questions are exactly the kind of data these cases are about.
Before You Act
Thinking About Filing a Claim?
Most plaintiff lawyers offer a free initial consultation and work on contingency, meaning no fee unless there is a recovery. LawsuitWatch is not a law firm: we publish explainers, and we do not provide legal advice, representation or referrals. Your state bar directory is the reliable place to find and verify a lawyer.
GoodRx Lawsuit: The FTC Health-Data Sharing Case: Frequently Asked Questions
Answers to the most common questions about this case and your legal options.
What did GoodRx do?
The FTC alleged GoodRx shared users' medication searches, health conditions and identifiers with Facebook, Google and others for advertising, without proper disclosure, violating the Health Breach Notification Rule.
How much was the GoodRx settlement?
$1.5 million, in February 2023, in the FTC's first enforcement action under the Health Breach Notification Rule. GoodRx also agreed to stop sharing health data for advertising.
Was there a consumer payout?
The $1.5 million was a penalty to the government; unlike the BetterHelp matter, it was not structured as consumer refunds. Verify any consumer claim through official sources.
Legal Disclaimer
This article is general legal information, not legal advice, and does not create an attorney-client relationship. Case status, eligibility criteria, and any amounts described are as reported at the date shown and may change. Consult a licensed attorney in your jurisdiction about your own situation.