OkCupid: User photos shared without informed consent

US regulators accused OkCupid of sharing nearly three million user photos and associated personal information with an external technology company. The case resulted in a settlement in 2026.

What happened

According to the US Federal Trade Commission (FTC), OkCupid gave an external technology company access to large amounts of user data in 2014: nearly three million profile photos, location information and other personal data. The FTC alleged this contradicted the privacy promises OkCupid had made to its users; the recipient was not an ordinary service provider covered by the sharing terms. Users were allegedly neither informed nor offered a chance to opt out. The data was made available for developing facial recognition technology – users had uploaded their photos to use a dating service, not for that purpose. In March 2026 the FTC announced a settlement with OkCupid and Match Group Americas that restricts how the companies may describe their handling of personal data.

What is documented

• The FTC filed a formal complaint alleging deceptive sharing of personal data.
• The FTC identified nearly three million user photos in the shared material.
• The FTC announced a settlement on 30 March 2026. It takes effect once approved by a federal court.
• The FTC says the companies concealed the sharing from September 2014.
• Reuters reported on 20 April 2026 that the recipient company confirmed deleting the photos and the models trained on them.

What has not been established

• Whether individual users suffered identity theft because of the transfer.
• Whether every affected user was identified and notified.
• Whether further concrete harm occurred before the data was deleted.

What this means for you

1. Check what rights a service claims over your profile photos and personal data.
2. Don't share photos or details that aren't needed for your dating profile.
3. Request access to your stored data, and deletion when you close your account.