Provision record
Hims & Hers · Hims & Hers Terms and Conditions · View original document ↗

Sensitive Personal Information Processing Authorization

High severity Medium confidence Explicit document language Unique · 0 of 352 platforms
Stay ahead of the changes
Track Hims & Hers and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

The agreement establishes that use of the platform constitutes a request by the user for Hims & Hers and Medical Groups to process sensitive personal information, including health information, as necessary to provide the service, including personalized recommendations delivered by email and on the platform.

ⓘ

This analysis describes what Hims & Hers's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision frames the processing of sensitive personal information, including health and mental health data, as user-initiated through the act of using the service, which structures consent as implicit in platform use rather than through a separate affirmative consent mechanism. The consent-through-use framing may require evaluation against state privacy laws that impose specific opt-in consent requirements for sensitive data processing.

⚠

Interpretive note: Whether the consent-through-use framing satisfies opt-in consent requirements under CPRA, Washington's My Health MY Data Act, and analogous state statutes depends on regulatory interpretation and enforcement posture in each jurisdiction.

Recent Activity

This document changed recently

Medium Sep 1, 2026

The updated terms revise when subscription cancellations become effective for pre-paid multi-month medication plans. Under the previous language, cancellation could occur at least two days before the billing date following the end of the currently shipped supply. The revised policy now states that cancellation must occur at least two days before the next billing date but will not take effect until the end of the medication supply period. This means that if you request cancellation after a billing date but before your current medication shipment is fully consumed, your subscription will continue through the end of that supply period before the cancellation takes effect. You should review the specific timing of your medication shipments and billing dates to understand when a cancellation request will fully process.

View change record →
Medium Aug 7, 2026

The updated terms now authorize Hims & Hers to bill for Weight Loss Membership at 'monthly or multi-month intervals' rather than on a fixed monthly basis, expanding the company's discretion over billing frequency. Additionally, the agreement establishes that refunds for partially used membership or medication plan periods 'may be provided in our sole and absolute discretion' instead of guaranteeing refunds under specific conditions. The first-month membership fee is explicitly non-refundable, and medication refunds remain available only if cancelled within 48 hours of initial order or two days before renewal. The practical effect is that subscribers cannot predict billing intervals with certainty, and refund eligibility now depends on company discretion rather than contractual terms alone.

View change record →

Consumer impact (what this means for users)

Under this clause, using the Hims & Hers platform constitutes a request for the company and affiliated Medical Groups to process sensitive personal information, including health data, for service delivery and personalization purposes including email recommendations. The agreement acknowledges that this information may be subject to heightened legal obligations in certain jurisdictions.

Cross-platform context

See how other platforms handle Sensitive Personal Information Processing Authorization and similar clauses.

Compare across platforms →
▸ View Original Clause Language DOCUMENT RECORD
"
The Service may also involve certain uses of personal information that is considered sensitive in certain jurisdictions or otherwise subject to heightened legal obligations. You understand that by using the Service or Platform, you are requesting that Hims & Hers and/or the Medical Groups process your personal information, including sensitive personal information, as necessary to provide you the features described on the Hims & Hers website and the Platform or as otherwise required to provide the Service to you. This may include, for example, sending you personalized recommendations relating to your use of the Service by email and/or on the Platform.

Excerpt from Hims & Hers's Terms and Conditions

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

REGULATORY LANDSCAPE: This provision engages the CCPA and CPRA, which require opt-in consent for the processing of sensitive personal information as defined under California law, including health data and mental health data.

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • Federal Trade Commission (ftc)
    Oversees unfair or deceptive business practices and can investigate companies that mislead consumers about data collection, sharing, or use.
    Who can file: Anyone affected by the company's practices (US or international)
    What you need: Your account details, a timeline of relevant events, and a description of the specific issue
    What to expect: Complaints inform FTC enforcement priorities and investigations but do not result in individual resolution or compensation
    File a complaint →
  • State Attorney General
    State AGs in California, New York, Texas, and other states can investigate violations of state consumer protection and privacy laws, including CCPA (California), SHIELD Act (New York), and equivalents.
    Who can file: Residents of states with comprehensive privacy laws — primarily California, Virginia, Colorado, Connecticut, and Utah
    What you need: Evidence of the violation, explanation of how your state rights were affected, and your account or contact information with the company
    What to expect: Outcomes vary by state. May result in investigation, enforcement action, or requirement for the company to change practices. No direct individual compensation in most cases.

    Search "[your state] attorney general consumer complaint" to find your state's direct complaint form

Provision details

Document information
Document
Hims & Hers Terms and Conditions
Entity
Hims & Hers
Document last updated
July 5, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-015480
Document ID
CA-D-00906
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
125a36c8df75aae2f8e2938adaed9db682f47d9cd5264d01a86ca550ad3fb7ef
Analysis generated
July 9, 2026 08:05 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Hims & Hers
Document: Hims & Hers Terms and Conditions
Record ID: CA-P-015480
Captured: 2026-07-09 08:05:51 UTC
SHA-256: 125a36c8df75aae2…
URL: https://conductatlas.com/platform/hims-hers/hims-hers-terms-and-conditions/provision/CA-P-015480/sensitive-personal-information-processing-authorization/
Accessed: Oct. 3, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Hims & Hers's Sensitive Personal Information Processing Authorization clause do?

This provision frames the processing of sensitive personal information, including health and mental health data, as user-initiated through the act of using the service, which structures consent as implicit in platform use rather than through a separate affirmative consent mechanism. The consent-through-use framing may require evaluation against state privacy laws that impose specific opt-in consent requirements for sensitive data processing.

How does this clause affect you?

Under this clause, using the Hims & Hers platform constitutes a request for the company and affiliated Medical Groups to process sensitive personal information, including health data, for service delivery and personalization purposes including email recommendations. The agreement acknowledges that this information may be subject to heightened legal obligations in certain jurisdictions.

Is ConductAtlas affiliated with Hims & Hers?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Hims & Hers.