Does the acquisition of a mission-driven startup by a massive financial institution inevitably lead to the erosion of user privacy? This question sits at the center of a burgeoning legal battle, as the founder of Shark Tank-backed startup Scholly sues his acquirer Sallie Mae. What began as a celebrated exit for a prominent Black fintech founder has devolved into a complex web of allegations involving wrongful termination and the unauthorized monetization of sensitive data belonging to minors.

From Shark Tank Success to Legal Warfare

Chris Gray’s trajectory from navigating scholarship hurdles in Birmingham, Alabama, to securing millions in funding via Shark Tank is a quintessential entrepreneurial success story. Alongside co-founders Nick Pirollo and Bryson Alef, Gray built Scholly into a powerhouse that reached five million users by streamlining the often fragmented search for educational funding. The platform’s ability to match students based on core criteria like GPA, race, and financial need made it an essential tool for a generation facing rising tuition costs.

In July 2023, the trajectory of Scholly shifted when Sallie Mae acquired the company. For Gray, the deal promised to scale Scholly’s impact by making the platform free for all students while bringing the startup under the protective umbrella of a federally regulated financial institution. This acquisition was initially viewed as a landmark moment for Black-led fintech, representing a rare and successful exit for a venture-backed founder in the space.

Inside the Lawsuit: Why the Scholly Founder is Suing Sallie Mae

The optimism surrounding the merger has been replaced by high-stakes litigation in the Delaware Superior Court and a whistleblower complaint filed with the Securities and Exchange Commission. Gray alleges that following the acquisition, Sallie Mae began laying off the original founding team and moved to monetize user information. The lawsuit claims that Gray was terminated specifically after attempting to raise alarms regarding the privacy of the data collected by his former app.

A central pillar of the complaint is the allegation that Sallie Mae is bypassing banking regulations through a strategic corporate structure. By housing Scholly within a subsidiary known as SLM Education Services, LLC, Gray argues the company can sell sensitive student data to third parties without the oversight applied to a regulated bank. This entity operates via Sallie.com, a platform that Gray claims could easily be confused with the official Sallie Mae banking site due to similar branding and layouts.

The privacy policy for this subsidiary indicates that several categories of user information are shared with advertisers and educational institutions, including:

  • Full names and contact details such as email and phone numbers
  • Demographic markers including age, race, and gender
  • Educational history and academic records
  • Precise geolocation data

The Future of Fintech Acquisitions

Sallie Mae has dismissed these claims as entirely without merit. A company spokesperson stated that the allegations are false accusations from a former employee who departed the firm nearly two years ago. Despite this denial, the legal battle focuses on Backpack Media, a new network launched by the company that utilizes Scholly’s data to target Gen Z and Gen Alpha audiences with high precision.

The outcome of this litigation will likely set a significant precedent for the fintech industry and the ethics of data monetization. If Gray successfully proves that subsidiaries are being used as shields to circumvent privacy regulations, it could fundamentally change how large-scale acquisitions are scrutinized by regulators. For founders, the case serves as a stark reminder that an exit is not always an end to responsibility, but often the beginning of a much more complex and legally fraught chapter.