LegitScript certification
LegitScript certification is a third-party vetting program that verifies a healthcare or telehealth business operates legally and transparently — and is the certification Google and Meta require before allowing telehealth and pharmacy advertising.
- Required by Google and Meta for telehealth and pharmacy ads
- Reviews corporate structure, licensure, site claims, and privacy practices
- Typically takes weeks to a few months
- Certified sites are monitored on an ongoing basis
Why LegitScript matters for growth
The major ad platforms treat telemedicine and online pharmacy as restricted categories: to run ads for these services on Google or Meta, the advertiser must first be LegitScript-certified. That makes certification a growth gate, not a compliance nicety — an otherwise-ready program that cannot advertise is capped at organic and word-of-mouth acquisition.
What LegitScript reviews
Certification examines the legal structure of the business (including the medical-group arrangement behind a telehealth brand), licensure of the clinicians and pharmacies involved, prescribing policies, product claims on the website, privacy practices, and transparency about who is providing care. Applications with unclear clinical entities, unlicensed fulfillment, or off-label marketing claims are where reviews stall.
Timelines run weeks to a few months depending on complexity and how complete the application is. Getting the clinical structure and website claims audit-ready before applying is the single biggest accelerator.
Getting certified on the first pass
Applications stall on ambiguity, so remove it before applying: document the medical-group structure and who employs the clinicians, list every pharmacy partner with licensure, and audit your site’s claims — off-label promises, guaranteed outcomes, and “no doctor visit needed” copy are the classic rejections.
Certification is also not a one-time gate: LegitScript monitors certified sites, and ad accounts get suspended when sites drift out of compliance. Treat the certification requirements as permanent content guidelines for the marketing team, not a launch checklist.
The review, step by step
The application walks LegitScript through your whole clinical structure: who owns the medical entity, who employs the clinicians and where they are licensed, which pharmacies fill and ship, what your site claims, and how patient data is handled. Reviews stall on ambiguity — unclear entity structures, unlicensed fulfillment paths, or marketing that promises outcomes. The accelerator is arriving audit-ready: clean corporate documents, a licensure roster, and a claims-reviewed website. Programs on established clinical infrastructure inherit most of that paperwork from the platform.
Compliance handled, so you can build
Lithos runs the clinicians, pharmacies, and 50-state rules behind your care program — one API.
Frequently asked questions
Is LegitScript certification legally required?
No — it is a private certification. But Google and Meta require it for telehealth and pharmacy ads, which makes it commercially required for most DTC programs.
How long does certification take?
Typically several weeks to a few months, driven by the completeness of the application and the clarity of the clinical and pharmacy arrangements behind the brand.
Does using compliant infrastructure speed it up?
It helps materially: a clean, documented clinical entity structure, licensed clinician network, and licensed pharmacy chain are most of what the review examines.