Patients who received therapy through Thriveworks face a tight deadline to file a claim for a fixed payout tied to allegations that the company shared their session data with third parties without consent. The claims window closes on July 21, giving affected individuals limited time to act. At the center of the dispute are federal and state wiretap statutes that prohibit the interception or disclosure of electronic communications, and the legal question of whether tracking tools embedded in patient-facing portals crossed that line.
Why the July 21 deadline puts pressure on Thriveworks patients
The filing window creates an immediate decision point for anyone who used Thriveworks services and may have had their data exposed. A fixed payout of $10 per claim is modest, but the short timeline means patients who delay risk forfeiting their share entirely. The structure of the settlement, which caps individual recovery at a small dollar amount, reflects a pattern common in data breach cases where the class is large and the per-person harm is difficult to quantify in court.
The legal foundation rests on two statutes that operate in parallel. Federal law under 18 U.S.C. Section 2511, the Electronic Communications Privacy Act, makes it unlawful for any person to intentionally intercept or disclose the contents of any wire, oral, or electronic communication. That statute applies nationwide and sets the baseline for the claims. Florida residents, however, have an additional path. Florida Statutes Section 934.03, titled “Interception and disclosure of wire, oral, or electronic communications prohibited,” provides a separate, state-level cause of action that mirrors the federal prohibition but exists independently of it.
That dual-track structure raises a practical question: will Florida patients file at higher rates than those in other states? The logic is straightforward. When a state statute offers its own prohibition and its own remedies, claimants in that state face a lower procedural bar because they can pursue recovery under either or both laws. Patients elsewhere must rely solely on the federal statute. Whether this translates into measurably higher participation from Florida is not yet confirmed by public data, but the statutory framework creates conditions that favor it.
Federal and Florida wiretap statutes behind the claims
The allegations center on tracking technologies, such as pixels or analytics scripts, that were allegedly embedded in Thriveworks patient portals. These tools are designed to collect user behavior data and transmit it to third-party platforms. When applied to a therapy provider’s website or app, the concern is that the contents of patient interactions, including session-related information, may have been captured and shared without informed consent.
The federal statute is broad in scope. Published by The Florida Senate, the state counterpart uses similar language to prohibit interception and disclosure of electronic communications. Both laws treat unauthorized disclosure as a violation regardless of whether the interceptor intended to cause harm. The key legal question in cases like this is whether the data collected by tracking tools qualifies as “contents” of a communication or merely metadata. Courts have reached different conclusions on that distinction in similar pixel-tracking lawsuits against healthcare providers in recent years.
No public statement from Thriveworks detailing which specific tracking technologies were used, or how many patients were affected, has been confirmed in available records. The absence of that information limits the ability of individual patients to assess their own exposure before deciding whether to file.
