In a stunning revelation, a new class action lawsuit accuses a health-focused company of breaching user privacy by allowing third parties to intercept sensitive personal data. The complaint was filed by Stacy Penning in the Superior Court of California, County of San Francisco, on July 31, 2024, against Aura Health, Inc.
The lawsuit alleges that Aura Health enabled Meta Platforms, Inc. and Mixpanel, Inc. to intercept communications between users and Aura Health through its website and mobile application. According to the complaint, these third parties were able to capture sensitive information as users filled out an onboarding survey designed to personalize their meditation plans. The plaintiff argues that this interception occurred without users' consent and constitutes a violation of the California Invasion of Privacy Act (CIPA), specifically Cal. Penal Code §§ 631(a) and 632.
Aura Health markets itself as a leader in mental wellness and sleep improvement services, often referred to as the "Spotify of mindfulness." Users engage with Aura Health's services via its website and app in hopes of improving their mental well-being. However, the complaint asserts that instead of keeping these personal journeys private, Aura Health allowed Meta and Mixpanel to eavesdrop on users' responses for marketing and data analytics purposes.
Stacy Penning claims that around April 2023, she visited Aura Health's website to register for personalized meditation services. During this process, she answered various survey questions revealing sensitive information about her mental health issues such as anxiety and anger management problems. These answers were allegedly intercepted by Meta and Mixpanel without her consent. Penning discovered this violation only in May 2025 upon consulting legal counsel.
The plaintiff seeks relief on behalf of all California residents who completed Aura Health’s survey while residing in California and had their electronic communications intercepted by Meta or Mixpanel. The lawsuit demands both injunctive relief to stop further interceptions and monetary damages for those affected.
The case is being handled by attorneys Stefan Bogdanovich (State Bar No. 324525) and Ines Diaz Villafana (State Bar No. 354099) from Bursor & Fisher, P.A., located at Walnut Creek, CA. The case ID is CGC-24-616888.