Healthcare · Purpose limits Settled privacy allegations
BetterHelp: permission to provide care was not permission to advertise
- Incident
- Historical sharing practices addressed in the 2023 FTC case
- Source report
What was reported
The FTC finalized an order resolving allegations that BetterHelp disclosed email addresses, IP addresses, and health-questionnaire information to advertising platforms despite promising limited use. The order required $7.8 million in payments, prohibited health-data sharing for advertising, and imposed consent, deletion, privacy-program, and retention requirements. This was an enforcement case about data use, not a reported ransomware attack.
Our perspective
Our reading: A counseling workflow and an advertising workflow should not inherit the same access. Vivendur’s intended task-specific permissions are relevant to deciding which information may reach each AI tool and for what purpose.
Explore task-specific accessLimits of this connection
The case does not test Vivendur. Purpose restrictions require enforceable controls, governance, and oversight of recipients; a permission label alone cannot stop onward use.