Christopher Gray, the founder of the popular scholarship-finding app Scholly, has filed a lawsuit against student loan giant Sallie Mae. The legal action alleges wrongful termination and accuses the company of creating a deliberate scheme to sell the personal data of millions of students. This dispute, which follows Sallie Mae's 2023 acquisition of Scholly, places a sharp focus on data privacy practices within the ed-tech industry.
The Acquisition and Allegations
In 2023, Sallie Mae acquired Scholly, a platform celebrated for helping students find more than $100 million in scholarship funding. Gray joined the company as a vice president, initially believing the partnership would make the app free and expand its reach. However, his tenure concluded with a contentious firing that has now escalated into a high-profile legal challenge against his former employer.
The lawsuit, filed in Delaware Superior Court, claims Gray was terminated in retaliation for raising internal concerns about data monetization. He alleges that Sallie Mae went against prior assurances by laying off the original Scholly team and moving forward with plans to sell user data. Gray contends he was fired just before a scheduled meeting to discuss these privacy issues directly with Sallie Mae's CEO.
A Tale of Two Entities
At the heart of the complaint is a corporate structure allegedly designed to circumvent federal privacy laws like the Gramm-Leach-Bliley Act. The suit argues that Sallie Mae operates its regulated bank through salliemae.com while using a non-bank subsidiary for the nearly identical sallie.com. This two-entity system purportedly allows the subsidiary to sell personal data, a practice that would be prohibited for the bank.
According to the subsidiary's privacy policy, it sells sensitive user information, including names, contact details, race, gender, and geolocation data. This information is reportedly used to power new ventures like Backpack Media, an advertising network offering brands access to student audiences. The data is sold to various third parties, including ad networks, educational institutions, and companies that resell consumer information.
Company Response and Founder's Resolve
Sallie Mae has strongly refuted the claims, labeling them as "without merit" and "false accusations" from a former employee. A company spokesperson confirmed they intend to defend themselves vigorously but declined to comment on specific data privacy practices. The company is also accused of attempting to force Gray's claims into private arbitration to avoid public scrutiny.
Gray, who has also filed a whistleblower complaint with the U.S. Securities and Exchange Commission, insists his actions are meant to protect students. He stated that he built Scholly to help students access funding, not to have their personal information sold to advertisers. Citing his protected whistleblower status, Gray has affirmed his commitment to speaking out despite alleged threats from the company.
From Scholarship Winner to Tech Founder
Gray's entrepreneurial path began with his own challenges in financing his education, having personally secured $1.3 million in scholarships. This difficult and fragmented experience inspired him to create a centralized, easy-to-use platform to simplify the scholarship search process for others. His personal journey provided the foundational mission for Scholly to improve access to higher education funding for all students.
After its launch in 2013, Scholly gained national recognition following a successful appearance on the television show "Shark Tank." The platform grew to serve five million users, operating on a low-cost subscription model designed to remain sustainable without selling user data. The acquisition by Sallie Mae was initially seen as the culmination of a decade of successful growth and social impact.
The legal battle between Christopher Gray and Sallie Mae highlights a critical tension between corporate strategy and the protection of user data. The case will be watched closely by regulators and consumers, as its outcome could establish important precedents for how financial institutions manage sensitive student information. It ultimately raises fundamental questions about corporate ethics and responsibility in the rapidly evolving education technology landscape.