Your Trauma Was Their Ad Budget
What They Sold Wasn’t a Product. It Was You.
Imagine you are in a dark place. Not metaphorically. Clinically. You have tried the standard medications, the standard therapies. Nothing worked. Then someone tells you about ketamine treatment, an emerging and still-stigmatized option for people dealing with treatment-resistant depression, PTSD, trauma responses that will not quit. It feels like a last resort. It takes courage to make that appointment.
You fill out intake forms. You describe your symptoms. You describe the years you have been struggling. You give your name, your contact information, the details of your mental health history to a company whose entire brand promise is safety, healing, and a path forward. “Choose Your Horizon.” The name itself is designed to make you feel like you are in control of what comes next.
Then that company takes what you told them in confidence, the fact that you sought ketamine therapy, the behavioral and medical signals attached to your profile, and feeds it into the pipes of the digital advertising ecosystem. Third-party trackers. Ad networks. Platforms designed to target you based on what they know about you. Platforms where the entire business model is using your data to manipulate your behavior.
You did not consent to becoming a marketing data point. You consented to being a patient.
The harm here is not abstract. When someone’s mental health treatment history is attached to their digital identity and passed to advertisers, it does not stay neatly contained. Data shared with ad networks gets aggregated, resold, and cross-referenced. The person who came to Choose Your Horizon looking for relief from suffering now exists in a data broker ecosystem tagged, in some form, by their connection to a mental health clinic. That tag does not expire. It can affect what ads you see, what prices you are shown, what job recruiters decide based on your profile. In a country with no meaningful federal data protection law, there is no mechanism to claw that information back.
And the company, when faced with a class action lawsuit for this alleged conduct, settled for $400,000. A number that, spread across the class of patients affected, amounts to a rounding error. The betrayal was monetized twice: first when your data was sold to advertisers, and again when the company’s legal bill for that betrayal was capped at a sum that required no serious sacrifice.
What the Record Actually Says
The source material available for this investigation comes from ClassAction.org’s official lawsuit database entry. The following factual statements are drawn directly from that source record.
“$400K Choose Your Horizon Settlement Ends Class Action Lawsuit Over Alleged Third-Party Data Sharing”
— ClassAction.org lawsuit database entry headline, verbatim
- The use of the word “alleged” reflects pre-settlement legal language, standard practice when no court verdict was reached. The settlement itself represents a financial resolution of those claims, meaning the company paid rather than litigate the allegations to a verdict.
- The phrase “Third-Party Data Sharing” in the official case title confirms the core claim: patient data was routed to external entities, parties outside the therapeutic relationship between patient and provider.
- A $400,000 settlement pool in a class action is notable for its smallness relative to the potential class size. Class actions involving medical data breaches at health-tech companies have settled in the tens of millions when the plaintiff class is large. The $400K figure either reflects a negotiated discount, a small class size, or the limited bargaining power of patients against a company’s legal team.
— ClassAction.org post title describing the conduct at the center of the lawsuit
- The post title frames this as an active, completed act (“Shared”), not a hypothetical or speculative risk. ClassAction.org’s database entries are indexed based on filed legal complaints, meaning a plaintiff attorney made this specific allegation in formal court documents.
- The target recipients named in that title are advertisers, commercial entities whose sole purpose for receiving the data would be behavioral profiling and targeted marketing. This is not a description of data shared with a research institution or a public health body. It is data fed into the commercial surveillance infrastructure.
The Damage Doesn’t Stop at Your Inbox
Public Health
The long-term consequence of this kind of data abuse is a measurable chilling effect on people seeking mental health treatment.
- Patients who learn that their mental health provider may share their data with advertisers face a documented deterrent to seeking care. Public health researchers call this the “privacy-disclosure tradeoff,” and in the context of mental health, it is lethal: untreated depression and PTSD carry serious risks of self-harm and suicide.
- Ketamine therapy specifically serves patients who have already failed multiple prior treatments. These are the most vulnerable, most isolated segment of the mental health patient population. Eroding their trust in providers does not push them toward better alternatives. There are no better alternatives in their history. It pushes them toward nothing.
- The normalization of health data sharing between clinical providers and ad networks weakens the de facto confidentiality that makes therapy possible. Therapy operates on radical honesty. If patients believe their honesty has a commercial price tag attached to it, they will not be honest. A patient who withholds symptoms gets worse care. Worse care produces worse outcomes. The public health system absorbs those costs invisibly.
Economic Inequality
The populations who seek telehealth and app-based mental health services like ketamine therapy are disproportionately those who cannot afford traditional in-person psychiatric care. They are also the populations least equipped to fight back when a company monetizes their vulnerability.
- Settlement payouts in class actions of this type are typically distributed across large patient classes, often resulting in individual checks of a few dollars or a few dozen dollars at most. The $400,000 pool means that even if only a few hundred patients are in the class, each person’s share of the settlement for having their most private medical data commodified is financially insulting relative to the actual harm.
- Patients in lower income brackets are more likely to rely on telehealth platforms and less likely to have the legal resources to pursue individual lawsuits. Class actions exist precisely to aggregate these claims, but when settlements are capped at $400,000, the deterrent effect on the corporation is minimal. The math on future misconduct still favors the company.
- Advertising targeting based on mental health data can produce downstream economic harms. Insurance algorithms, employer background check vendors, and financial services platforms increasingly pull from commercial data broker databases. A patient’s association with a mental health treatment provider, once in the advertising data supply chain, is a liability that follows them in ways they cannot see or contest.
What Your Privacy Was Worth to Them
Your Next Move
The $400,000 settlement is closed. But the systemic conditions that made this possible are still running at full speed, and other health-tech companies are doing the same thing right now.
Corporate Accountability: Who to Watch
- The leadership and executive team of Choose Your Horizon [REDACTED – Not in Source]: The specific names of executives responsible for data governance decisions at Choose Your Horizon are not confirmed in the source material. If you are a class member or investigator with access to the full complaint, the data privacy officer and CEO are the roles to scrutinize.
- The third-party advertising and analytics vendors [REDACTED – Not in Source]: The specific ad networks that received patient data are not named in the source material. The full complaint filed in this case would identify them. Class action complaints are public record.
Regulatory Watchlist
- HHS Office for Civil Rights (OCR): The primary federal enforcer of HIPAA. If Choose Your Horizon is a covered entity or business associate under HIPAA, OCR has jurisdiction over unauthorized disclosures of protected health information. File a complaint at hhs.gov/ocr.
- Federal Trade Commission (FTC): The FTC has increasingly pursued health data privacy enforcement under its Section 5 authority against unfair and deceptive trade practices. The FTC’s Health Breach Notification Rule may also apply to health apps and non-HIPAA-covered health services.
- State Attorneys General: States with strong data privacy laws (California, Virginia, Colorado, Connecticut, Texas) have independent authority to prosecute health data violations. Your state AG’s consumer protection division is a direct escalation path.
- Consumer Financial Protection Bureau (CFPB): Relevant if the data sharing implicated financial profiling or if downstream data broker activity affected patients’ access to credit or insurance products.
Grassroots Resistance and Mutual Aid
- If you were a patient at Choose Your Horizon and received a settlement notice, submit your claim. Even a small individual payout forces the company to distribute the full settlement pool and reduces the benefit they retain.
- Demand data deletion. Under CCPA (California), VCDPA (Virginia), and similar state laws, you have a legal right to request that a company delete your personal data and disclose what third parties received it. Send the request in writing. Keep records.
- Connect with mental health patient advocacy organizations. Groups fighting for psychiatric patients’ rights are on the front lines of the broader fight against health data commodification. Donate, volunteer, or amplify their work.
- Support federal health data privacy legislation. The current HIPAA framework was written before smartphones existed and does not cover most health apps or telehealth platforms. Contact your federal representatives and demand a modern health data privacy law with teeth and individual private right of action.
- Share this story with anyone you know who uses telehealth platforms. The single most powerful individual action in privacy fights is awareness. These companies count on patients not knowing their rights or what was allegedly done with their data.
The source document for this investigation is attached below.
Explore by category
Product Safety Violations
When companies sell dangerous goods, consumers pay the price.
View Cases →Financial Fraud & Corruption
Lies, scams, and executive impunity that distort markets.
View Cases →


