Short answer: To get LegitScript certification for a telehealth business, you confirm your provider and pharmacy licensing in every state you serve, make sure your website, privacy policy and marketing meet LegitScript’s Healthcare Certification Standards, confirm your partner pharmacies are LegitScript-certified or NABP-accredited, then create an account, pay the application fee and submit your application for compliance review. Approval is never automatic, and preparation is what keeps the review moving.
LegitScript certification for telehealth is one of the first real gates a new digital clinic has to pass. Without it, the major ad platforms will not let you promote prescription treatments, and many payment processors will hesitate to support your merchant account. The good news is that LegitScript publishes its standards and an application checklist, so you can prepare for the review long before you submit.
This guide explains what LegitScript certification is, who needs it, what reviewers look at, how the application works step by step and how to keep your certification once you have it. It is written for first-time founders, in plain English.
What is LegitScript certification for telehealth?
LegitScript is a private company that verifies businesses in highly regulated industries, including healthcare. Its Healthcare Merchant Certification program reviews telehealth providers, online pharmacies and related businesses to confirm they operate legally, hold the right licenses and market their services honestly.
According to LegitScript, its healthcare certification is recognized by Visa, Mastercard, Google, Microsoft Bing, Facebook (Meta), LinkedIn and TikTok. That recognition is the reason it matters so much. It acts as a shared legitimacy signal that payment companies and ad platforms rely on when deciding whether to work with a healthcare business.
LegitScript notes that telemedicine providers offering online consultations that may result in a prescription are in scope for the program. If your digital clinic connects patients to licensed providers who may prescribe, and especially if you sell or facilitate prescription medications online, you should plan for certification.
Do you need LegitScript certification for a telehealth business?
No federal or state law requires LegitScript certification in general. In practice, most telehealth brands that plan to grow need it, for three reasons.
- Advertising. Meta requires online pharmacies and telehealth providers promoting prescription drugs to be actively certified with LegitScript and to obtain authorization from Meta. Google requires certification through LegitScript or an NABP program for online prescribing and dispensing services, plus its own application. LegitScript states that without certification, telemedicine businesses are limited in their ability to advertise on Google, Microsoft, Meta and TikTok.
- Payments. According to LegitScript, Visa and Mastercard require merchants that facilitate card-not-present sales of pharmaceuticals, including telemedicine providers, to be registered as high-risk merchants and continuously monitored. Many processors use LegitScript certification as part of that process. Our guide to getting a telehealth merchant account covers this in depth.
- Trust. Certified businesses can display the LegitScript seal, which signals to patients and partners that an independent reviewer has checked the business.
If you only plan to publish general education content and never promote prescription treatments or process payments for medications, your needs may be different. Most founders launching a product-led digital clinic should assume they will apply.
LegitScript certification standards for telehealth
LegitScript evaluates applicants against its published Healthcare Certification Standards. Here is a plain-English summary of each one and what it means for a telehealth brand.
| Standard | What LegitScript looks for | What it means for your brand |
|---|---|---|
| Licensure and business registration | Appropriate licenses for the services offered in each jurisdiction | Active business registration plus provider and pharmacy licenses for every state you serve |
| Legal compliance | Compliance with laws on prescribing and dispensing | Your model follows state telehealth rules, including how the provider relationship is established |
| Prior discipline and history | Disclosure of regulatory, criminal or civil history | Owners, principals and affiliates are screened, so disclose issues honestly and document resolutions |
| Affiliates and partners | Partners also operate legally and meet the standards | Your pharmacies, provider network and marketing partners are part of the review |
| Patient services | Clear disclosure of where services are available | Your website lists the states you serve and offers only permissible products |
| Privacy | Compliance with privacy laws, including HIPAA where applicable | A compliant privacy policy and secure handling of patient data |
| Validity of prescription | Only valid prescriptions from authorized practitioners | A licensed provider evaluates every patient before any prescription is written |
| Transparency | Accurate, non-misleading practices and offers | Accurate domain registration, visible business location and patient contact information |
| Advertising | Ads that follow laws and platform policies | Claims that meet FDA and FTC rules, with no attempts to get around the program |
Our telehealth compliance checklist goes deeper on the laws behind several of these standards, including state licensure, HIPAA and FTC health claims.
What you need before you apply for LegitScript certification
LegitScript publishes a Healthcare Certification Application Checklist and strongly encourages applicants to review it, along with the standards, before submitting. Based on that checklist, gather the following.
Licensure and registration
- Your active business registration, which for U.S. businesses is usually your Secretary of State filing number.
- Active license information for every jurisdiction you operate in, including pharmacy licenses where applicable.
- Practitioner license numbers (MD, NP, PA) for the providers who deliver care, entered in LegitScript’s telemedicine template.
- DEA certificates, if you prescribe or dispense controlled substances.
Legal compliance and patient services
- Website language and product offerings that follow the laws of each state you serve.
- A U.S. HIPAA-compliant privacy policy on your website.
- Documentation supporting the resolution of any discipline within the last five years, if applicable.
- Advertising claims in line with FDA and FTC guidance.
- A completed compounding addendum, if your platform facilitates the sale of compounded medications. Remember that compounded medications are not FDA-approved, and your site must never say or imply they are.
Transparency and access
- Wireframes or screenshots and an expected completion date, if your website is still under development.
- A test patient account with login details so reviewers can see your patient portal.
Affiliates and partner pharmacies
- A list of affiliates, including co-owned businesses, pharmacies, provider networks and marketing partners, all of which should meet the standards.
- Proof that each partner pharmacy is LegitScript-certified or NABP-accredited, or confirmation that it is ready to apply.
That last point surprises many founders. LegitScript’s checklist states that all partner pharmacies are required to be certified through LegitScript or be NABP-accredited. Pharmacies and medical providers partnered with an applicant that are not certified must submit their own application within sixty days after the applicant’s certification, and the outcome of their review may affect yours. Choosing partners that are already certified removes a major source of risk. Our guide to what a 503A pharmacy is explains how to evaluate compounding partners.
How to get LegitScript certification: step by step
- Confirm your model with a healthcare attorney. Ownership structure, corporate practice of medicine rules and state telehealth requirements shape everything that follows. This matters even more if you are not a clinician.
- Lock your states and products. Decide which states you will serve at launch and which treatments you will offer. Every state and product adds licensing and compliance work for the review.
- Verify your provider network. Confirm that providers are licensed in every launch state and that your intake and evaluation flow meets each state’s rules for establishing a patient relationship.
- Verify your pharmacies. Check each partner pharmacy’s status in LegitScript’s public lookup and confirm licensing for the states you serve.
- Get your website review-ready. Publish a privacy policy, terms, the states you serve, business contact details and accurate product pages. Remove any claims you cannot support.
- Audit your marketing. Review landing pages, ads, emails and social content against FDA and FTC rules. LegitScript reviews advertising as part of its standards.
- Create your account and apply. LegitScript’s process starts with an account at its certification portal, where you enter your contact information, start a new certification and pay the application fee.
- Complete the templates. Fill out the licensure, telemedicine and, if needed, compounding templates carefully. Incomplete information is one of the most common reasons reviews slow down.
- Respond quickly to reviewer questions. Reviewers may ask for clarifications, documents or website changes. Fast, complete answers keep your file moving.
- Maintain it after approval. Keep licenses current and tell LegitScript about material changes, as described below.
How much does LegitScript certification cost?
According to LegitScript’s healthcare certification FAQ, pricing consists of a one-time, nonrefundable application fee, listed at $975 at the time of writing, plus an annual certification fee per root domain that is due only if your application is approved. LegitScript’s terms state that fees are not refundable and that the annual fee renews automatically unless you cancel before the renewal date. Certification covers a root domain and its subdomains, and each additional root domain carries its own fees. Probationary certification is priced case by case. Check LegitScript’s site for current pricing before you budget, since published figures change. Our guide to how much it costs to start a telehealth business shows where certification fits in your overall plan.
How long does LegitScript certification take for telehealth?
LegitScript does not publish a single standard review time, and no one can promise a date. In our experience, timing depends mostly on how complete your application is, whether your partner pharmacies are already certified, how many states and products you include and how quickly you answer reviewer questions.
The practical takeaway is to start preparing early. Many founders wait until the website is finished to think about certification, then discover that licensing gaps, a missing privacy policy or an uncertified partner pharmacy force weeks of rework. Build certification readiness into your launch plan from the start. Our guide on how long it takes to start a telehealth business shows where the application usually fits in a launch timeline.
Common reasons LegitScript applications stall
- Licensing gaps. A state is listed on the website, but a provider or pharmacy is not licensed there.
- Uncertified partners. LegitScript’s checklist names affiliations with merchants that facilitate the sale of unapproved drugs, such as impermissible peptides or bulk drug substances, as a common barrier.
- Misleading claims. Calling compounded drugs FDA-approved, generic or the same as brand-name drugs, or implying a prescription is guaranteed.
- Missing transparency details. No business address, no patient contact information, or domain registration details that do not match the business.
- Unfinished website. A site under construction without wireframes or a completion timeline.
- No reviewer access. Forgetting the test patient account reviewers need to see the portal.
- Undisclosed history. Discipline or regulatory matters involving owners or affiliates that were not disclosed up front.
After you are certified: how to keep LegitScript certification
LegitScript continues to monitor certified businesses throughout the certification period. According to its FAQ, you must notify LegitScript of significant changes, including ownership or operational changes, major website updates, new services, expansion into new jurisdictions, licensing updates and any disciplinary or regulatory action.
So before adding a new state, product category or website, confirm the licensing and compliance work first, then update LegitScript. Additional websites need their own compliance review and fees. A single noncompliant ad or landing page can put certification, ad accounts and payment processing at risk at the same time.
Questions to ask your platform and partners before you apply
- Are your partner pharmacies LegitScript-certified or NABP-accredited today?
- Which states are your providers and pharmacies licensed in right now?
- How does your intake and provider review meet each state’s telehealth requirements?
- Will you provide the license details and documentation LegitScript’s templates ask for?
- Can you set up a test patient account for reviewers?
- How do you handle privacy, HIPAA and business associate agreements?
- Who reviews marketing claims before they go live?
- What happens to my certification if a partner loses a license or changes status?
How WellieMD helps
WellieMD is a white-label telehealth platform built so your digital clinic is ready for review from day one. We build it with you: branded intake, a licensed provider network, licensed 503A pharmacy routing, payments and subscriptions, refills, labs and wearables, HIPAA safeguards with a business associate agreement, and LegitScript-ready builds that line up with the standards reviewers check. Your brand still submits its own application and makes its own decisions, and we help you prepare the licensing details, partner documentation and website elements the checklist asks for. When you want to walk through your plan, book a demo with WellieMD.
Frequently asked questions
Is LegitScript certification required by law for telehealth?
No law requires it in general. However, Meta requires LegitScript certification for telehealth providers promoting prescription drugs, Google requires LegitScript or NABP certification, and card networks expect high-risk pharmaceutical merchants to be verified. Most telehealth brands that plan to advertise or sell prescription treatments online need it.
How much does LegitScript certification cost?
At the time of writing, LegitScript lists a $975 nonrefundable application fee plus an annual certification fee per root domain that is due only if you are approved. Fees are nonrefundable and the annual fee renews automatically. Check LegitScript’s current pricing before you budget.
Do my partner pharmacies need to be certified too?
Yes. LegitScript’s checklist states that partner pharmacies must be LegitScript-certified or NABP-accredited. Uncertified partner pharmacies and medical providers must apply within sixty days after your certification, and their outcome can affect yours.
Can I apply before my website is finished?
You can, but LegitScript asks for wireframes or screenshots and an expected completion date if your site is still in development. Reviewers also need a test patient account to see your portal. A mostly complete site with final policies usually makes the review smoother.
Does LegitScript certification guarantee ad approval?
No. Certification makes you eligible to apply on platforms like Meta and Google, but each platform runs its own authorization process and reviews every ad against its policies. Individual ads can still be rejected, and your marketing must stay compliant after approval.
This guide is general information, not legal or medical advice. Talk with a healthcare attorney about your specific model. Prescription products require evaluation by a licensed provider. Compounded medications are not FDA-approved.
Sources
- LegitScript: Certification for Telemedicine Providers
- LegitScript: Healthcare Certification Standards
- LegitScript: Healthcare Merchant Certification FAQ
- LegitScript: Healthcare Certification Application Checklist
- LegitScript: Healthcare Certification Terms and Conditions
- Meta: Advertising Standards, Drugs and Pharmaceuticals
- Google Ads: Healthcare and medicines policy