LegitScript Certification for Telehealth: What It Is and How to Get It

What is LegitScript certification?

LegitScript is an independent company that reviews healthcare businesses and certifies the ones that meet its standards. Its program is formally called LegitScript Healthcare Merchant Certification. Ad platforms and payment companies use it as a shortcut: instead of vetting every telehealth brand themselves, they check whether LegitScript already has.

LegitScript reviews you against nine standards. In plain English, it checks your licenses, legal compliance, ten-year disciplinary history, partner pharmacies, the states listed on your website, patient privacy (HIPAA in the US), whether a licensed provider evaluates each patient before prescribing, the accuracy of your claims, and whether your advertising follows the law and platform rules.

It is not a one-time stamp. LegitScript keeps monitoring certified businesses after approval.

Who needs LegitScript certification, and who doesn’t?

For founders, the business types LegitScript covers include:

• Telemedicine and telehealth providers, including GLP-1, hormone and other prescription brands
• Pharmacies, online or brick-and-mortar
• Digital health platforms that connect patients with contracted providers and pharmacies
• Medical spas

You may not need it if you only offer non-prescription, non-clinical services, or don’t advertise on platforms that require it. Most telehealth brands growing through paid ads do need it, and their partner pharmacies generally need certification or accreditation too.

Which ad platforms and payment processors check for it?

One point founders often miss: certification gets you in the door, not a pass on every ad. LegitScript itself puts it this way: certification “qualifies you to be on the road but it doesn’t mean you can ignore the traffic laws.” Ads still get flagged for unsupported claims, missing disclosures, restricted drug names and before-and-after images.

How the LegitScript application works, step by step

LegitScript describes five steps. Here is each one from the founder’s side.

1. Check eligibility. Confirm your location, business type and scope of services fit the program.
2. Gather documentation. Collect licenses, policies, partner details and marketing materials (list below).
3. Submit the application. Pay the application fee and complete the questionnaire in LegitScript’s client portal.
4. Expert review. An analyst reviews your business, website and partners. Expect follow-up questions. LegitScript can’t decide until all necessary information is in.
5. Get certified. Once approved, you pay the annual fee and can display the LegitScript seal.

Then come the platform steps:

1. Apply for Google healthcare certification. Apply at the individual Google Ads account level (not the manager account), with your customer ID and certified domain.
2. Set up Meta. Register as a health-related advertiser and keep creative within Meta’s rules.

Why LegitScript applications stall

Most delays come from founders who built the business first and read the standards second.

Undisclosed domains. You must disclose every domain you control, even ones you don’t want certified. Each domain you do want certified needs its own application and annual fee. Founders running funnels on separate domains often learn this mid-review. Plan your domain structure first, and send ads to the certified domain.

Partner pharmacies that aren’t certified. Your fulfillment pharmacies generally need their own certification or accreditation. If one partner isn’t, the review waits.

No state list on the website. LegitScript requires your site to show every state where you serve patients. It is a small fix that stops a review cold.

Marketing claims. Claims that a compounded GLP-1 is the same as a brand-name drug, or a pharmacy described as “FDA-approved,” fail the transparency standard. The FDA sent dozens of warning letters to telehealth companies over these claims in 2026. Name the compounding pharmacy where required. Our page on the GLP-1 marketing rules we build around covers this.

Incomplete answers and slow replies. LegitScript says thorough, transparent responses prevent back-and-forth. Leaving out information, including past legal matters, can lead to denial.

How long does LegitScript certification take, and what does it cost?

LegitScript does not publish a standard review time on its healthcare certification page, so timelines vary. What it does state: an optional expedited service starts the review within 2 business days of submission, for an added fee. Starting the review is not the same as finishing it. In our experience, the biggest factor is how complete your application is on day one.

LegitScript charges its own fees, separate from anything you pay a platform or agency. As listed on LegitScript’s healthcare certification page when we checked on October 8, 2026:

• Application fee: $975 per website, nonrefundable
• Annual certification fee: $2,150 per website, due once approved
• Expedited processing (optional): an added $2,500 per application

Fees change. Always confirm current pricing on legitscript.com before you budget.

How LegitScript certification opens Google Shopping for telehealth brands

For certified brands, Google Shopping (the product listings with images and prices at the top of search results) can become a second engine beside search ads. Shopping runs from a Merchant Center product feed, and Google allows prescription drug listings only in the US and Canada, and only from certified online pharmacies.

In our accounts, one LegitScript-certified brand has scaled Google Shopping past $5,000 a day in spend. Results vary by offer, state mix, budget and execution. Past results do not guarantee future results.

The catch: Shopping eligibility depends on what you list and how Google classifies your business. We confirm that before building a feed. See more in our telehealth case studies.

How ModFX and Heroship help you get certified

Heroship, the done-for-you telehealth platform we build on for founders and growing brands, includes LegitScript application support as part of a launch. In practice:

1. We build the site to the standards: state list, privacy policy, accurate claims and compounder identification.
2. We organize the documents and help with analyst follow-ups.
3. We handle the platform side. Google healthcare certification, Meta setup and, where eligible, a Shopping feed.
4. Then we run the marketing, because certification on its own doesn’t bring in a single patient.