What LegitScript Certification Requires for Telehealth Ads

Google, Meta, and TikTok require LegitScript certification for telehealth and online pharmacy advertisers. What the certification process involves, what you need to provide, and who actually needs it.

June 8, 20267 min read

LegitScript certification is a requirement that many telehealth founders encounter late — often after an ad account is restricted or a campaign is rejected. LegitScript is a third-party verification organization that Google, Meta, TikTok, and several other platforms use to pre-screen healthcare and pharmacy advertisers before granting them access to certain ad categories. Understanding what LegitScript requires, how long the process takes, and who actually needs it can save you weeks of delayed campaigns and ad account frustration.

LegitScript certification is not a government license. It is a private verification that demonstrates to ad platforms that your business operates legally, maintains appropriate professional oversight, and meets specific standards for patient safety and business transparency. The platforms have outsourced the review of healthcare advertisers to LegitScript because verifying the legitimacy of online pharmacies and telehealth providers requires specialized domain knowledge that platform policy teams do not have in-house.

Who Needs LegitScript Certification

Not every telehealth advertiser needs LegitScript certification. The requirement typically applies to businesses that sell prescription medications online, operate as online pharmacies, or advertise specific prescription drug treatments directly to consumers. If your telehealth brand advertises access to prescription GLP-1 medications, prescription ED treatments, prescription hair loss medications, or other Rx products, you are likely in the certification-required category on Google and Meta. If your brand only advertises a consultative service without mentioning specific prescription products, the certification requirement may not apply.

The trigger is usually prescription drug-adjacent advertising — any ad that names, describes, or implies prescription medication. A telehealth brand that runs ads describing "access to semaglutide" or "prescription weight loss treatment" is in a different category than one that runs ads about "virtual weight loss consultations with licensed providers." The former will typically be required to obtain LegitScript certification to continue running those ads on Google and Meta; the latter may not. When in doubt, contact your Google Ads representative or Meta support and describe your advertising content before assuming certification is or is not required.

What LegitScript Reviews in Its Application

The LegitScript certification application for telehealth advertisers typically requires documentation in several categories. Business licensing: you must provide evidence that your business is legally incorporated and licensed to operate in the states where you offer services. Professional oversight: you must demonstrate that licensed healthcare providers — physicians, nurse practitioners, or other appropriately licensed professionals — are involved in the prescribing and clinical decisions made on your platform. Prescription fulfillment: if you dispense or facilitate the dispensing of prescription medications, you must provide evidence that the dispensing pharmacy holds appropriate state pharmacy licenses and, where applicable, NABP or PCAB accreditation.

LegitScript also reviews your website for compliance with its standards. Your patient-facing website and any promotional materials must clearly identify the business name and location, provide accessible contact information, include clear prescription disclosure language, and not make claims that contradict FDA labeling requirements. LegitScript reviewers look at your full online presence — not just your advertising — so the content on your landing pages, your FAQ section, and your service description pages all factor into the certification decision.

The Certification Timeline and Cost

The LegitScript certification process typically takes four to eight weeks from application submission to approval, though applications with incomplete documentation or issues identified during review can take significantly longer. The initial application fee varies by business type and size — telehealth providers generally fall into LegitScript's healthcare merchant or online pharmacy categories, with associated fees that can range from a few hundred to several thousand dollars for the initial certification, plus an annual renewal fee.

The timeline implication is important for campaign planning. If you are planning to launch a GLP-1 or prescription medication campaign on Google or Meta and you do not already have LegitScript certification, you cannot assume the certification will arrive in time for a planned launch date. Build the certification process into your pre-launch timeline, ideally starting the application process six to eight weeks before your planned campaign start. Running into a LegitScript bottleneck at launch is a common and entirely avoidable problem. See our full guide to Google Ads prescription drug policy for how certification integrates with the broader approval process.

We produce paid social creative exclusively for telehealth brands. From 18 to 200 videos per month.

Get in Touch

How Each Platform Uses LegitScript

Google uses LegitScript as a prerequisite for its Healthcare and Medicines certification, which is required for online pharmacies and advertisers of prescription drug products in the US. Without this certification, Google will not approve ads for prescription medication-related content. The certification applies at the account level, not the ad level — once certified, you can run prescription medication-adjacent ads across your entire Google account without re-certifying for each campaign.

Meta uses LegitScript as part of its online pharmacy and telehealth advertiser review process. Meta's ad review system for pharmaceutical and telehealth content is less clearly documented than Google's, but LegitScript certification is increasingly required for running prescription drug adjacent content on Facebook and Instagram — particularly in the GLP-1, ED, and compounding pharmacy categories. TikTok has adopted a similar approach, requiring LegitScript certification for health-related advertising that includes prescription medication content, as part of its broader health product advertising policy.

Maintaining Certification After Approval

LegitScript certification requires annual renewal, and LegitScript conducts ongoing monitoring of certified businesses. If your business changes materially — you add new services, change your pharmacy partner, expand to new states, or modify how prescriptions are fulfilled — you may need to notify LegitScript of the change. Certified businesses that experience regulatory actions, state licensing issues, or consumer complaints may have their certification reviewed or suspended.

Maintaining certification also requires that your website and advertising remain consistent with what LegitScript approved. If your certified application described a specific prescription fulfillment model, and you later change that model without updating LegitScript, you risk the certification being challenged. Treat LegitScript certification as a living document that needs to be updated as your business evolves, not a one-time approval that you can set and forget. Many telehealth brands that lost LegitScript certification did so not because of initial compliance failures, but because they did not maintain the documentation standard after approval.

What to Do While Waiting for Certification

While your LegitScript certification is pending, you can still run telehealth advertising that does not trigger the certification requirement. Service-focused advertising — promoting access to licensed healthcare providers, virtual consultations, and general health programs — typically does not require certification because it does not advertise specific prescription products. This approach lets you build audience, generate leads, and test creative while your certification processes.

The service-access framing is also often more effective in paid social because it focuses on the patient experience and the value of care access rather than on a specific drug product. Many telehealth brands find that their most effective ads emphasize convenience, physician access, and personalized care — not the specific medication that may ultimately be prescribed. Building your creative approach around this framing during the certification period gives you a baseline of compliant, performing ads that you can supplement with product-specific content once certification is complete. See our broader guide to Meta ad policies for telehealth for what types of content can run before and after certification.

Telehealth advertising strategy that accounts for certification requirements

We work with telehealth brands at every stage — pre-certification and post — to build paid social strategies that perform within platform requirements.

Get in Touch