The FTC has hit OKCupid and Match Group Americas with enforcement after finding the dating app secretly shared user data and misled customers about its privacy promises, and a settlement now bans the companies from deceiving users about how their data is collected, used, shared, or protected.
The Federal Trade Commission opened an enforcement action after investigators found OKCupid and Match Group Americas broke their own privacy commitments. Regulators concluded the companies shared customers’ personal information in ways the companies’ policies said would not happen, and that users were kept in the dark.
Company records show that personal data handed to an outside business included sensitive items such as photos and location. Customers expect platforms to honor clear privacy terms, and the agency found those expectations were betrayed by private data transfers that happened without proper protections or notice.
The FTC’s complaint says the outside party received “nearly three million OKCupid user photos as well as location and other information without placing any formal or contractual restrictions on how the information could be used,” and investigators flagged that as a major privacy failure. Regulators pointed out that the transfer ran counter to the written assurances users received in the app’s documentation and privacy statements.
The settlement with the agency imposes a permanent bar on misleading claims about data handling and privacy controls by OKCupid and Match. It forbids deceptive statements about how the companies collect, use, share, or protect people’s data and requires clearer, enforceable practices going forward.
One FTC official put the agency’s position plainly: “We will investigate, and where appropriate, take action against companies that promise to safeguard your data but fail to follow through—even if that means we have to enforce our Civil Investigative Demands in court.” That language signals willingness to use full investigative tools when companies fall short.
The original federal complaint traces the problematic sharing back to 2014 and says the transfer happened because the dating app’s owners were tied to the other business that received the files. Regulators treated that relationship as an aggravating factor, since internal ties made it easier to move user content without proper oversight.
At the time, OkCupid operated under Humor Rainbow, part of the larger Match corporate family that owns multiple dating platforms. The FTC noted that this corporate web made the disclosure failures worse because customers were given assurances that their information would be protected across the brand family, and those assurances were not honored.
Investigators also say company personnel attempted to conceal what happened and denied involvement during inquiries. Those steps, the agency found, fit the pattern of deceptive practices outlawed under Section Five of the FTC Act, where misrepresentations about data use or hidden transfers violate legal standards.
The agency’s action fits a broader pattern of scrutiny into big tech and platform privacy lapses. In recent years the FTC reached a settlement with Amazon’s Ring over employee access to home camera footage, and prior enforcement targeted Meta for sharing user data in ways that breached an earlier privacy order connected to the Cambridge Analytica scandal.
These enforcement steps underline that federal regulators expect companies to match public privacy promises with concrete protections and to stop hiding data flows behind vague language. The OKCupid and Match settlement will require the companies to adopt changes and avoid misleading customers as the agency continues to monitor the marketplace for similar conduct.
