Popular pharmacy chain CVS has been hit with a lawsuit that alleges the company sold data from customers who shopped on its websites (cvs.com and cvshealth.com) or the mobile app. 

The lawsuit alleges that CVS disclosed private health information, browsing data and more from users to advertising company Criteo and other third parties, though the pharmacy denies any wrongdoing. It has settled to the tune of $20.5 million to avoid additional expenses by continuing the lawsuit and other business disruptions. 

Email notifications (PDF) for potential class members were sent out earlier in September, but the deadline to submit the claim form is Nov. 16, 2026. If you’ve ever shopped on any of the CVS websites or mobile apps prior to July 27, 2026, you’re considered eligible to receive payment, but you must still submit a claim. 

According to the official settlement website, customers who submit a claim without documentation may receive up to $5, and those who submit a claim with valid documentation of belonging to the class may receive up to $10, but the amount may be reduced depending on the number of valid claims submitted. 

As is typical with class action lawsuits, potential class members may also opt out of the settlement. Opting out of the settlement will prevent payment, but will allow you to maintain your rights to directly sue the company yourself. The final date to opt out of the settlement is Nov. 1, 2026.

The final hearing is set to take place on Dec. 1, 2026, and if the court approves the settlement, payments will be issued 120 days after approval. Class members can be paid via check, PayPal, Venmo or Zelle.

Blake has over a decade of experience writing for the web, with a focus on mobile phones, where he covered the smartphone boom of the 2010s and the broader tech scene. When he’s not in front of a keyboard, you’ll most likely find him playing video games or watching horror movies.

See full bio