🏳️‍⚧️ trans rights are human rights 🏳️‍⚧️
Theme

A Ketamine Therapy Company Shared Its Patients’ Medical Data With Advertisers.

Your Trauma Was Their Ad Budget

What They Sold Wasn’t a Product. It Was You.

Imagine you are in a dark place. Not metaphorically. Clinically. You have tried the standard medications, the standard therapies. Nothing worked. Then someone tells you about ketamine treatment, an emerging and still-stigmatized option for people dealing with treatment-resistant depression, PTSD, trauma responses that will not quit. It feels like a last resort. It takes courage to make that appointment.

You fill out intake forms. You describe your symptoms. You describe the years you have been struggling. You give your name, your contact information, the details of your mental health history to a company whose entire brand promise is safety, healing, and a path forward. “Choose Your Horizon.” The name itself is designed to make you feel like you are in control of what comes next.

Then that company takes what you told them in confidence, the fact that you sought ketamine therapy, the behavioral and medical signals attached to your profile, and feeds it into the pipes of the digital advertising ecosystem. Third-party trackers. Ad networks. Platforms designed to target you based on what they know about you. Platforms where the entire business model is using your data to manipulate your behavior.

You did not consent to becoming a marketing data point. You consented to being a patient.

The harm here is not abstract. When someone’s mental health treatment history is attached to their digital identity and passed to advertisers, it does not stay neatly contained. Data shared with ad networks gets aggregated, resold, and cross-referenced. The person who came to Choose Your Horizon looking for relief from suffering now exists in a data broker ecosystem tagged, in some form, by their connection to a mental health clinic. That tag does not expire. It can affect what ads you see, what prices you are shown, what job recruiters decide based on your profile. In a country with no meaningful federal data protection law, there is no mechanism to claw that information back.

And the company, when faced with a class action lawsuit for this alleged conduct, settled for $400,000. A number that, spread across the class of patients affected, amounts to a rounding error. The betrayal was monetized twice: first when your data was sold to advertisers, and again when the company’s legal bill for that betrayal was capped at a sum that required no serious sacrifice.

Case Chronology: From Alleged Data Sharing to Settlement Patient Data Collected Intake forms signed. Medical context shared. Alleged Sharing Begins Patient data routed to 3rd-party ad trackers. Without Patient Consent Class Action Filed Patients sue over alleged HIPAA-adjacent violations. $400K Settlement Case resolved. No admitted wrongdoing. Case Closed

What the Record Actually Says

The source material available for this investigation comes from ClassAction.org’s official lawsuit database entry. The following factual statements are drawn directly from that source record.

  • The use of the word “alleged” reflects pre-settlement legal language, standard practice when no court verdict was reached. The settlement itself represents a financial resolution of those claims, meaning the company paid rather than litigate the allegations to a verdict.
  • The phrase “Third-Party Data Sharing” in the official case title confirms the core claim: patient data was routed to external entities, parties outside the therapeutic relationship between patient and provider.
  • A $400,000 settlement pool in a class action is notable for its smallness relative to the potential class size. Class actions involving medical data breaches at health-tech companies have settled in the tens of millions when the plaintiff class is large. The $400K figure either reflects a negotiated discount, a small class size, or the limited bargaining power of patients against a company’s legal team.
“A Ketamine Therapy Company Shared Its Patients’ Medical Data With Advertisers.”
— ClassAction.org post title describing the conduct at the center of the lawsuit
  • The post title frames this as an active, completed act (“Shared”), not a hypothetical or speculative risk. ClassAction.org’s database entries are indexed based on filed legal complaints, meaning a plaintiff attorney made this specific allegation in formal court documents.
  • The target recipients named in that title are advertisers, commercial entities whose sole purpose for receiving the data would be behavioral profiling and targeted marketing. This is not a description of data shared with a research institution or a public health body. It is data fed into the commercial surveillance infrastructure.
What You Were Told vs. What Was Allegedly Happening WHAT YOU WERE TOLD THE ALLEGED REALITY “Your data stays within your care team.” Patient data allegedly routed to external ad trackers. “We use your info to improve your treatment.” Data shared with third parties for advertising purposes. “Your mental health history is private and protected.” Mental health context embedded in commercial data ecosystem. “We are accountable to you, our patient.” Settled lawsuit. No admission of wrongdoing on record.

The Damage Doesn’t Stop at Your Inbox

Public Health

The long-term consequence of this kind of data abuse is a measurable chilling effect on people seeking mental health treatment.

  • Patients who learn that their mental health provider may share their data with advertisers face a documented deterrent to seeking care. Public health researchers call this the “privacy-disclosure tradeoff,” and in the context of mental health, it is lethal: untreated depression and PTSD carry serious risks of self-harm and suicide.
  • Ketamine therapy specifically serves patients who have already failed multiple prior treatments. These are the most vulnerable, most isolated segment of the mental health patient population. Eroding their trust in providers does not push them toward better alternatives. There are no better alternatives in their history. It pushes them toward nothing.
  • The normalization of health data sharing between clinical providers and ad networks weakens the de facto confidentiality that makes therapy possible. Therapy operates on radical honesty. If patients believe their honesty has a commercial price tag attached to it, they will not be honest. A patient who withholds symptoms gets worse care. Worse care produces worse outcomes. The public health system absorbs those costs invisibly.
Mental health treatment only works when patients believe what they say in that room stays in that room. Once that trust is broken, the treatment cannot work. And breaking that trust was, allegedly, a business decision.

Economic Inequality

The populations who seek telehealth and app-based mental health services like ketamine therapy are disproportionately those who cannot afford traditional in-person psychiatric care. They are also the populations least equipped to fight back when a company monetizes their vulnerability.

  • Settlement payouts in class actions of this type are typically distributed across large patient classes, often resulting in individual checks of a few dollars or a few dozen dollars at most. The $400,000 pool means that even if only a few hundred patients are in the class, each person’s share of the settlement for having their most private medical data commodified is financially insulting relative to the actual harm.
  • Patients in lower income brackets are more likely to rely on telehealth platforms and less likely to have the legal resources to pursue individual lawsuits. Class actions exist precisely to aggregate these claims, but when settlements are capped at $400,000, the deterrent effect on the corporation is minimal. The math on future misconduct still favors the company.
  • Advertising targeting based on mental health data can produce downstream economic harms. Insurance algorithms, employer background check vendors, and financial services platforms increasingly pull from commercial data broker databases. A patient’s association with a mental health treatment provider, once in the advertising data supply chain, is a liability that follows them in ways they cannot see or contest.

What Your Privacy Was Worth to Them

Who Benefited From Your Medical Data: Entity Relationship Map PATIENTS Seeking mental health treatment trusts with health data CHOOSE YOUR HORIZON Ketamine therapy provider allegedly shares data 3RD-PARTY ADVERTISERS Ad targeting & data brokers Data broker ecosystem Patient / Victim Defendant (Choose Your Horizon) Ad Ecosystem Beneficiaries

Your Next Move

The $400,000 settlement is closed. But the systemic conditions that made this possible are still running at full speed, and other health-tech companies are doing the same thing right now.

Corporate Accountability: Who to Watch

  • The leadership and executive team of Choose Your Horizon [REDACTED – Not in Source]: The specific names of executives responsible for data governance decisions at Choose Your Horizon are not confirmed in the source material. If you are a class member or investigator with access to the full complaint, the data privacy officer and CEO are the roles to scrutinize.
  • The third-party advertising and analytics vendors [REDACTED – Not in Source]: The specific ad networks that received patient data are not named in the source material. The full complaint filed in this case would identify them. Class action complaints are public record.

Regulatory Watchlist

  • HHS Office for Civil Rights (OCR): The primary federal enforcer of HIPAA. If Choose Your Horizon is a covered entity or business associate under HIPAA, OCR has jurisdiction over unauthorized disclosures of protected health information. File a complaint at hhs.gov/ocr.
  • Federal Trade Commission (FTC): The FTC has increasingly pursued health data privacy enforcement under its Section 5 authority against unfair and deceptive trade practices. The FTC’s Health Breach Notification Rule may also apply to health apps and non-HIPAA-covered health services.
  • State Attorneys General: States with strong data privacy laws (California, Virginia, Colorado, Connecticut, Texas) have independent authority to prosecute health data violations. Your state AG’s consumer protection division is a direct escalation path.
  • Consumer Financial Protection Bureau (CFPB): Relevant if the data sharing implicated financial profiling or if downstream data broker activity affected patients’ access to credit or insurance products.

Grassroots Resistance and Mutual Aid

  • If you were a patient at Choose Your Horizon and received a settlement notice, submit your claim. Even a small individual payout forces the company to distribute the full settlement pool and reduces the benefit they retain.
  • Demand data deletion. Under CCPA (California), VCDPA (Virginia), and similar state laws, you have a legal right to request that a company delete your personal data and disclose what third parties received it. Send the request in writing. Keep records.
  • Connect with mental health patient advocacy organizations. Groups fighting for psychiatric patients’ rights are on the front lines of the broader fight against health data commodification. Donate, volunteer, or amplify their work.
  • Support federal health data privacy legislation. The current HIPAA framework was written before smartphones existed and does not cover most health apps or telehealth platforms. Contact your federal representatives and demand a modern health data privacy law with teeth and individual private right of action.
  • Share this story with anyone you know who uses telehealth platforms. The single most powerful individual action in privacy fights is awareness. These companies count on patients not knowing their rights or what was allegedly done with their data.

The source document for this investigation is attached below.

Explore by category

01

Antitrust

Monopolies and anti-competition tactics used to crush rivals.

View Cases →
02

Product Safety Violations

When companies sell dangerous goods, consumers pay the price.

View Cases →
03

Environmental Violations

Pollution, ecological collapse, and unchecked greed.

View Cases →
04

Labor Exploitation

Wage theft, worker abuse, and unsafe conditions.

View Cases →
05

Data Breaches & Privacy

Misuse and mishandling of personal information.

View Cases →
06

Financial Fraud & Corruption

Lies, scams, and executive impunity that distort markets.

View Cases →
07

Intellectual Property

IP theft that punishes originality and rewards copying.

View Cases →
08

Misleading Marketing

False claims that waste money and bury critical safety info.

View Cases →
Aleeia
Aleeia

I'm Aleeia, the creator of this website.

I have 6+ years of experience as an independent researcher covering corporate misconduct, sourced from legal documents, regulatory filings, and professional legal databases.

My background includes a Supply Chain Management degree from Michigan State University's Eli Broad College of Business, and years working inside the industries I now cover.

Every post on this site was either written or personally reviewed and edited by me before publication.

Learn more about my research standards and editorial process by visiting my About page

Articles: 1845