The Founder of Scholly Sold His Scholarship App to Sallie Mae. He Says They Fired Him for Asking Why They Were Selling Students’ Data.

Why It Matters

The dispute spotlights data‑privacy risks in fintech acquisitions and could force stricter disclosure standards for student‑finance platforms.

Key Takeaways

• Scholly had 5 million users when acquired by Sallie Mae.
• Gray alleges sale of minors’ age, gender, race, financial data.
• Lawsuit claims wrongful termination for raising privacy concerns.
• Settlement could set precedent for data‑use disclosures in acquisitions.
• Sallie Mae faces scrutiny amid past regulatory penalties.

Pulse Analysis

The Scholly acquisition was marketed as a strategic move to broaden Sallie Mae’s student‑financial‑wellness portfolio, leveraging a popular app that matched scholarships to a youthful demographic. Christopher Gray, a first‑generation college graduate who turned a $1.3 million scholarship haul into a Shark Tank‑backed startup, built Scholly into the top‑downloaded education tool. By integrating Scholly’s user base, Sallie Mae aimed to deepen its relationship with prospective borrowers, positioning the data pipeline as a value‑added service rather than a revenue driver.

Gray’s lawsuit alleges that, shortly after the 2023 deal, Sallie Mae laid off the founding team and began selling detailed user profiles—including minors’ demographic and financial information—to third‑party marketers. He contends his termination was retaliation for flagging these practices, which he says breach the implicit promise that student data would be used solely to secure scholarships. The SEC whistleblower filing adds a regulatory dimension, recalling Sallie Mae’s prior settlements over deceptive lending practices and highlighting growing scrutiny of how private lenders handle sensitive consumer data.

If the court finds merit in Gray’s claims, the case could reshape acquisition strategies across fintech, compelling acquirers to disclose data‑monetization plans and enforce stronger privacy safeguards. Investors may demand clearer contractual protections for user data, while startups could negotiate retention clauses to preserve mission integrity post‑sale. At a time when data privacy legislation is tightening, the outcome may set a benchmark for how educational technology assets are integrated without compromising the trust of millions of student users.