FTC-Safe Ad Tracking for Wellness Brands

Last updated: August 10, 2026 · By Jason Garrett, Founder, Coast Studio. Not legal advice. Full legal landscape: The State of HIPAA Tracking.

Being outside HIPAA is not being outside the law. DTC wellness and supplement brands often run e-commerce tracking with no thought to health privacy — and then discover the FTC is the regulator that covers exactly them. GoodRx and BetterHelp were not covered entities either, and the FTC’s pending 2026 case against Hims & Hers rests on the company being neither a pharmacy nor a medical provider. This is how to advertise without joining that list.

What triggers FTC risk for a wellness brand

The risk is the gap between what you promise and what your pixel does. A privacy policy that says "we protect your health information" while the Meta pixel broadcasts that a user bought a supplement for a specific condition is the classic deception case. The FTC also treats sending health-inferring data to advertisers without clear consent as an unfair practice on its own.

The playbook

1. Map your health signals. Which products, categories, or quiz answers imply a condition? Those are the sensitive flows.
2. Keep health-inferring data out of ad platforms. Route conversions server-side and scrubbed; send events and values, not condition context.
3. Gate tags behind real consent — opt-in where state law requires it, and blocking tags until the visitor agrees.
4. Make your privacy policy true. Describe your actual data flows. The mismatch is the whole case.
5. Watch quizzes and symptom finders. A "find your supplement" quiz that captures symptoms and fires a pixel is a health disclosure engine.

You can still run performance marketing

None of this means broad, untargeted spend. Scrubbed server-side conversions keep optimization running, and geo experiments prove incrementality. You lose the health-context surveillance you were never allowed to use anyway, and keep the performance you were.

FAQ

We're just selling vitamins. Is this overkill? If a purchase implies a condition — prenatal, sleep, anxiety, blood sugar — the FTC theory reaches you. General wellness with no condition inference carries less risk.

Does an opt-out cookie banner cover us? The FTC and state laws increasingly expect opt-in for sensitive data. An opt-out banner that fires tags on load is weak protection.

Is a symptom quiz off-limits? No, but keep its data out of ad platforms and describe it honestly in your policy. The quiz is fine; broadcasting its answers is not.