Digital Health App Marketing: Acquisition Without Overstepping Privacy

Health apps grow through performance marketing, the same playbook as other consumer apps. The difference is the data. Optimizing campaigns usually means sending in-app events back to ad platforms, and in health apps those events can reveal conditions. Several FTC actions have centered on exactly this.

Lessons from enforcement

The FTC has taken action against health services that shared users' sensitive health information with advertising platforms, including GoodRx and BetterHelp. The FTC also updated the Health Breach Notification Rule to clarify that it covers health apps. Common themes:

• Health data sent through pixels and SDKs without adequate consent.
• Privacy promises that did not match practice.
• Data used for ad targeting or optimization.

Data rules for app marketing

Acquisition channels

• App stores: search ads and store optimization.
• Search: symptom and solution queries, subject to platform health policies.
• Social and programmatic: broad or contextual targeting rather than health-data audiences.
• Partnerships: employers, health plans, providers.

Claims

Health and wellness claims must be truthful and substantiated. Apps that function as medical devices may be regulated by FDA. See the FTC health products guidance.

Measurement

• Activation: users who complete the core setup.
• Retention: active at 7, 30, and 90 days.
• Feature engagement: use of the main health feature.
• Incrementality: geographic or holdout tests where possible.

Privacy-safe measurement may mean less precise attribution. That is a tradeoff to accept.

Common mistakes

• Default SDK settings sending detailed events.
• Health-specific event names passed to ad platforms.
• Uploading member lists to social platforms.
• Optimizing to installs only.

A privacy-safe event plan

Hypothetical example for a sleep improvement app.

Optimization uses installs, sign-ups, and purchases. Health-specific engagement stays internal. Campaign performance can be judged on retention and engagement through internal analytics, joined to campaign identifiers without passing health data to ad platforms.

Consent design

• Ask for consent in plain language at the point it matters.
• Separate consent for product use from consent for marketing.
• Make withdrawal easy.
• Match privacy policy wording to what the app actually does.

Measuring without detailed tracking

• Geographic or time-based tests for paid channels.
• Promo codes or landing pages by channel.
• Cohort analysis of retention by acquisition source, using internal data only.

These methods are less precise than user-level tracking. They are also far less likely to create the kind of data sharing regulators have challenged.

Practical takeaway

Audit every event your app sends to advertising and analytics partners, and rename or remove any that reveal health information. Accept some loss of optimization precision in exchange for staying clear of the practices behind recent enforcement.

Editorial note. Analysis and frameworks are the author's own and do not represent Acxiom or any current or former employer, client, or named platform. Examples labeled hypothetical or illustrative are not results from real campaigns. Nothing here is legal, regulatory, or medical advice.