MDLIVE - Data Privacy Class Action Settlement

Pixel Tracking · Claims Open

Current Status

Claims are open. The court has preliminarily approved the settlement and authorized notice, and a claim must be submitted online by 11:59 p.m. ET on December 1, 2026 or mailed with a postmark no later than that date. The deadline to exclude yourself or object is earlier, November 16, 2026. The final approval hearing is set for January 6, 2027 at 9:30 a.m., held virtually, and nothing is paid until the court approves the settlement and any appeals are resolved.

What Changed Recently?

The settlement resolves a Florida state-court class action against MDLIVE, Inc., the telehealth company, and Evernorth Health, Inc., the Cigna Group health-services business that owns it. The plaintiffs allege that tracking technology on MDLIVE's website disclosed users' sensitive information and private communications from the patient portal to Google and Meta without consent. The notice frames the claims under the Florida Security of Communications Act and the federal Electronic Communications Privacy Act; the preliminary approval motion also cites Pennsylvania's wiretap statute.

MDLIVE and Evernorth expressly deny the allegations and deny that they violated any law or did anything wrong. They agreed to settle, according to the notice, to avoid the uncertainty and expense of continuing the case, and nothing in the settlement is an admission of liability. The unopposed motion for preliminary approval was filed on August 14, 2026 after a mediation, and the court has since authorized notice to the class and opened the claims process run by Kroll Settlement Administration.

Who Qualifies?

The Settlement Class is all MDLIVE users who accessed MDLIVE's patient portal, patient.mdlive.com, and engaged in any activity on the portal after signing in, from May 30, 2023 through August 11, 2025. The phrase that does the work is "after signing in": browsing MDLIVE's public marketing pages without logging in to the portal does not fit the definition. The court papers describe the class as hundreds of thousands of people.

There is a second condition to get paid. The claim form requires a sworn attestation that the claimant had an active Facebook and/or Google account during the class period. That tracks the theory of the case: the alleged disclosures were to Meta and Google, and the settlement pays people who had an account those companies could connect the activity to. A portal user who had neither account is still inside the class and bound by its release, but cannot truthfully make that attestation.

Excluded are any judge or magistrate presiding over the case and their families; MDLIVE and Evernorth, their subsidiaries, parents, successors, predecessors and controlled entities, and their current or former officers, directors, agents, attorneys and employees; anyone who files a timely request for exclusion; and the legal representatives, successors and assigns of anyone excluded.

Used LifeMD, Rex MD or ShapiroMD instead? This settlement covers MDLIVE only. A similar claim about a different telehealth company is at an earlier stage: attorneys are investigating whether answers typed into LifeMD's health intake questionnaires reached advertising networks before the visitor signed up. That is a new investigation, not a settlement and not part of this case — filing an MDLIVE claim does nothing for it, and it has no claim form. It is limited to California residents who started a LifeMD questionnaire on or before June 14, 2026. See the LifeMD data privacy investigation to learn more and check whether you may qualify.