Telehealth companies keep exposing their customers’ medical data. What should they do?

Telehealth services offer quick, convenient access to medications for various conditions, such as ADHD and anxiety. However, regulators have accused some companies of unethical practices, including sharing customers' medical data without permission. These firms often sign users up for recurring prescriptions without the chance to review treatment options, and many approve prescriptions within minutes, bypassing necessary consultations.

A study found that only a small percentage of telehealth companies required real-time video or audio consultations with physicians before prescribing GLP-1 drugs. HIPAA, which generally protects patients' medical information, doesn't apply to telehealth companies offering prescription services. As a result, companies can share sensitive health data with advertisers, social media platforms, and other third parties, despite a lack of clear federal regulations in this area.