LegitScript Certification and Advertising Telehealth, Prescription and Compounded Drugs on Meta and TikTok (2026)

General information only. This content is not legal, tax, medical or regulatory advice, and reading it does not create an attorney-client, provider or advisory relationship with Melius Wellness LLC. Melius is a business and operational advisory firm, not a law firm, and does not provide legal services. Laws and regulations vary by state and change often, and this content may not reflect recent changes. Consult qualified healthcare counsel and your tax and clinical advisers before acting on it. Last reviewed: October 2026.

Melius may have business relationships with telehealth platforms, pharmacies or service providers; we disclose any such relationship when relevant.

Telehealth and wellness companies ask the same three questions about paid social: Do we need LegitScript? Can we advertise compounded drugs? What about peptides? This guide sets out what the official sources say as of October 2026. Nothing here is a statement about whether any drug or peptide is safe or effective.

Bottom line

• Meta and TikTok control different things. Meta checks the advertiser: a telehealth provider needs active LegitScript certification plus Meta's own authorization before an ad promotes a prescription drug (Meta Business Help Center). TikTok's US rules check the product: prescription medicine ads need "proof of approval and certification from appropriate local regional regulating authorities, such as the US Food and Drug Administration (FDA)" (TikTok Healthcare and Pharmaceuticals policy).
• Certification is per website. Each domain needs its own application and annual fee (LegitScript). Meta asks for "the website URL that has been certified by LegitScript" (Meta).
• Peptides that aren't FDA-approved and aren't eligible for compounding can't be promoted. LegitScript says certified businesses may not offer, promote or advertise such peptides, including through a partner (LegitScript, Sept. 22, 2026).
• Education and general telehealth-service ads are possible without authorization on Meta (Meta Advertising Standards).

1. What is LegitScript certification?

LegitScript is a private certifier of healthcare merchants, including pharmacies, telemedicine providers, med spas, digital health platforms and manufacturers. It says certification "opens the door to advertising on Google, Meta, Microsoft Ads, TikTok, LinkedIn, and more — platforms that require LegitScript approval to run healthcare ads," and that Visa and Mastercard recognize it (LegitScript Healthcare Certification).

It isn't a law. LegitScript notes certification "may not be a federal legal requirement, but the advertising policies of major tech platforms often make it mandatory" (LegitScript, Feb. 25, 2025).

It also doesn't guarantee ad approval. LegitScript says each platform "has its own ad policies and requirements" (LegitScript) and that certified businesses still see disapprovals (LegitScript webinar recap).

The standards. LegitScript currently lists nine (LegitScript):

1. Licensure and business registration: licensed in the jurisdictions served, including the patient's.
2. Legal compliance: must not facilitate prescribing or dispensing medications "otherwise considered unapproved by relevant regulatory bodies."
3. Prior discipline and history: disclose criminal, regulatory and civil matters from the past 10 years. Recent or repeated warning letters may disqualify.
4. Affiliates and partners: all affiliates must comply. Partners essential to the continuum of care, "such as partner pharmacies," are "generally required to be LegitScript-certified or accredited by another recognized body." All domains must be disclosed.
5. Patient services: disclose every state or country where services are available.
6. Privacy: HIPAA where applicable, and SSL.
7. Validity of prescription: no prescribing or dispensing "prior to the provision of care by a licensed medical professional."
8. Transparency: nothing misleading, including "claims that a product or service has purported benefits that have not been supported by a regulatory body, such as the FTC, FDA."
9. Advertising: ads must be accurate and lawful. Advertising "in apparent violation of the platforms' terms of service" may be grounds for denial or revocation.

2. How do you get it?

Choosing the type of certification. LegitScript's Healthcare Merchant Certification covers several business models (LegitScript):

• Telemedicine providers that diagnose, treat and prescribe through licensed professionals.
• Digital health platforms: a company that "is not licensed as a pharmacy and does not directly employ medical practitioners, but your website facilitates the sale of prescription medicines by connecting patients with medical providers and contracted pharmacies." LegitScript says you don't qualify if "you do not have a contractual relationship with the medical providers and pharmacies that your website directs users to."
• Pharmacies.
• Enterprise certification: LegitScript points platforms that contract with "multiple pharmacies or provider networks" to its Enterprise team.

LegitScript's webinar panel said most telehealth providers classify as telemedicine providers rather than pharmacies "unless they own and operate their own pharmacy" (LegitScript). On Meta, you choose Online Pharmacy, Telemedicine or Pharmaceutical Manufacturer to match the classification shown on your LegitScript verification page (LegitScript).

The process. Check eligibility, gather documents, submit, go through expert review, then pay the annual fee to finalize (LegitScript). LegitScript asks applicants to have the following ready:

• business and professional licenses;
• registration details;
• DEA information, if applicable;
• a privacy policy;
• affiliate and partner compliance status;
• "product & service descriptions … current offerings, marketing claims, and advertising materials."

Once certified, you receive a public verification link (legitscript.com/websites/your-domain) and use it to register with each platform (LegitScript).

Cost (LegitScript):

Fees are nonrefundable, and cancelling ends certification immediately (LegitScript). LegitScript's pricing page doesn't publish a standard review time, other than the expedited start.

Readiness tips grounded in the standards:

• Disclosures: show the states you serve (Standard 5). Show the dispensing pharmacies and any other affiliates and partners (Standard 4).
• Valid prescriptions: make sure no prescription is issued before a licensed clinician provides care (Standard 7).
• Compounded products: don't describe them as FDA-approved, generic, the same as an approved drug, or clinically proven (FDA).
• Medical necessity: if you offer compounded GLP-1s, expect to explain how it is documented. FDA says lower price isn't enough to show a compounded drug isn't "essentially a copy," unless a prescriber documents a significant difference for an identified patient (FDA, Apr. 1, 2026).

3. Do you need it?

Meta (Facebook and Instagram)

Meta's Advertising Standards apply to ads "across Meta technologies" (Meta), and authorization is granted per ad account in Meta Business Suite (Meta). Facebook and Instagram placements fall under the same policy set.

• What authorization unlocks. Authorized advertisers may list prices, offer delivery, use sales CTAs, state availability, and share efficacy information "such as comparisons to other brands or results" (Meta). Federal rules still apply. For compounded drugs, FDA warns against claims of sameness with FDA-approved drugs (FDA).
• Keeping it. You must "maintain an active LegitScript Certification" (Meta).
• Health and Wellness rules (Meta, version dated July 22, 2026):
  • Weight-loss and cosmetic ads target 18+.
  • Ads can't contain "statements of inferiority about physical appearance."
  • Ads can't show close-ups of pinched fat.
  • Ads can't claim to cure listed conditions, including diabetes and thyroid disease. Claims about managing symptoms are allowed.
  • Ads can't promise "specific outcomes within a set timeframe without disclaimers or qualifiers."
  • Prescription weight-loss products follow the Drugs and Pharmaceuticals policy.
• Personal attributes. Ads can't "imply knowledge of medical information." Meta's own examples: "New diabetes treatment available" is allowed, but "Do you have diabetes?" is not (Meta).
• Data. Meta may restrict "specific mid and lower funnel events," or all events, from health-category data sources (Meta). It flags custom conversions and audiences that reference health conditions (Meta).
• Organic posts. Meta's Community Standards bar attempts to "buy, sell or trade prescription drugs," with a narrow exception for "legitimate healthcare e-commerce businesses" offering delivery to adults 18+ with a consult or prescription disclaimer (Meta Community Standards).

TikTok (United States)

• Prescription medicine "may be allowed" with proof of approval and certification from regulators such as FDA, restricted to 18+ (TikTok Healthcare and Pharmaceuticals, updated Sept. 2026).
• The Drugs policy bars "prescription drugs, and drugs for the purpose of recreation, homeopathy, enhancement, performance, and weight loss." The exception is Rx drugs in Canada and the US that are "approved by the regional regulating authority," carry no misleading claims, and target 18+ (TikTok, updated Apr. 2025).
• Pharmacies need NABP or LegitScript certification. Medical institutions must comply with local law, target 18+, and hold certifications that "may be required" (TikTok).
• Weight management. Claims must target 18+ and be made "via the promotion of a healthy lifestyle." No unrealistic results, no "product alone" claims, and no claims that losing weight is "easy or guaranteed." No body shaming or "ideal body" messaging (TikTok Weight Management and Body Image, updated Sept. 2026).
• Misleading content. No before-and-after "product effect comparisons" that create a false impression. Significantly AI-edited content must be labeled (TikTok, updated Apr. 2026).
• Creators. TikTok's Branded Content Policy lists "medical institutions, treatments or devices, including … online pharmacies and telehealth providers" among prohibited industries for branded content (TikTok Branded Content Policy). Check the market-specific sections before paying creators.

Does a partner's certification cover you?

Generally not for your own ads. Certification attaches to each certified website (LegitScript), and Meta's authorization flow requires the URL of the certified site (Meta). A partner's status still matters, because LegitScript generally requires an applicant's essential partners, such as dispensing pharmacies, to be certified or accredited (LegitScript Standard 4).

4. When do you need it?

• Before running a Meta ad that promotes a specific prescription drug, including its price, availability or a purchase CTA (Meta).
• Not needed for Meta ads that only educate or only promote telehealth services generally (Meta).
• For payments. LegitScript says certification can help with card-not-present payment processing and reduce the risk of account freezes (LegitScript).
• Continuously. Certification carries an annual fee and ongoing monitoring, and Meta may revoke authorization if certification lapses (LegitScript; Meta). LegitScript reviews "marketing claims, and advertising materials" during the application (LegitScript). Check its terms for when changes to products or claims must be reported.

5. FDA-approved drugs vs. compounded drugs vs. unapproved peptides

Compounded GLP-1s. FDA says tirzepatide and semaglutide are not on the 503B bulks list or the drug shortage list. It also says a 503A compounder may not regularly compound "essentially a copy" of a commercially available drug unless a prescriber documents a significant difference for an identified patient. FDA has said it doesn't intend to take action against a compounder that fills four or fewer prescriptions of such a product in a calendar month (FDA, Apr. 1, 2026).

What the April 2026 peptide action did and didn't do.

• What happened: In April 2026, FDA removed BPC-157 and other peptides from 503A Category 2 (substances that may present significant safety risks) after the nominations were withdrawn. FDA's page now lists them as "nominated but withdrawn" and still describes its safety concerns (FDA).
• What didn't happen: They weren't added to Category 1 or to the 503A bulks list (FDA categories list, updated May 14, 2026).
• The advisory committee: A Pharmacy Compounding Advisory Committee met July 23–24, 2026 to consider seven peptides (FDA; 91 FR 20465). FDA says advisory committees make "non-binding recommendations" (FDA). LegitScript's view: "Nothing changes today," and the peptides "remain ineligible for routine compounding" until a final rule (LegitScript, July 27, 2026).
• Still pending: An FDA "Interim Access Policy for Compounding Using Certain Peptides" was received for OMB review on October 14, 2026. Its text isn't public (Reginfo.gov). LegitScript says it will evaluate any formal regulatory change and update its review processes accordingly (LegitScript).

Education vs. promotion. LegitScript treats content as promotional, and impermissible "regardless of whether the business actually offers the product," if it (LegitScript, Sept. 22, 2026):

• makes efficacy or safety claims;
• gives dosing recommendations;
• claims a peptide "repairs" or "heals";
• calls a substance "clinically proven" without disclosures;
• implies FDA approval or that it's legal to compound;
• invites readers to obtain the product, unless it clearly says the product is unapproved and unavailable.

Factual regulatory reporting "generally doesn't require these disclaimers."

6. The gray area: prescribed but not advertisable

Some clinicians prescribe peptides that aren't FDA-approved, yet no major platform will run ads for them. Four reasons:

A prescription doesn't make a substance lawfully compoundable.

• Off-label use applies to approved drugs. FDA explains that "once the FDA approves a drug, healthcare providers generally may prescribe the drug for an unapproved use" (FDA). That framework assumes an approved drug.
• 503A sets ingredient conditions. Under section 503A, each bulk ingredient must meet a USP or NF monograph, be a component of an FDA-approved drug, or appear on the 503A bulks list (91 FR 20465).
• Category 1 is enforcement discretion, not approval. FDA's Category 1 is an interim enforcement-discretion policy for ingredients under evaluation (FDA interim policy).
• "Research use only" isn't a workaround. FDA has treated dosing guidance and reconstitution supplies as evidence of human use despite RUO labels (FDA warning letter, Aug. 24, 2026). Federal prosecutors have brought criminal cases against online peptide sellers (U.S. Attorney's Office, N.D. Ind.).
• States can be stricter. Ohio's Board of Pharmacy, in guidance dated December 8, 2025 (before FDA's April 2026 change), said research-use-only products are unlawful for prescriber clinics to possess and that BPC-157 can't be compounded (Ohio Board of Pharmacy).

So "prescribed" doesn't mean "lawfully supplied." Whether a particular arrangement is permissible is a question for healthcare and FDA counsel.

Platforms and certifiers set private rules. Meta bars "unsafe substances" at its sole discretion (Meta). TikTok allows only regulator-approved Rx (TikTok). LegitScript bars impermissible peptides, including through partners (LegitScript).

Federal advertising law applies everywhere. The FTC requires "competent and reliable scientific evidence" for health claims. Its definition of advertising includes social media, influencers and websites, and it treats mischaracterizing FDA approval as deceptive (FTC Health Products Compliance Guidance). FDA has warned telehealth companies over compounded-drug marketing (FDA, Mar. 3, 2026).

What this means in practice.

• Keep peptide content factual and educational under LegitScript's test.
• Don't build product pages, waitlists or pre-sales for ineligible substances.
• Ad policies cover landing pages as well as ads (TikTok).
• Organic posts are also covered:
  • Meta's Community Standards (Meta).
  • TikTok's Community Guidelines bar "trading, marketing, or providing access to regulated, prohibited, or high-risk goods" (TikTok).

Common rejection pitfalls

Recent changes timeline

Operator checklist

Before applying

• Pick the right certification type (telemedicine provider, digital health platform, pharmacy or enterprise) and list every domain you and your principals operate.
• Confirm you have contracts with the clinicians and pharmacies your site directs patients to, and get their LegitScript or other accreditation status.
• Publish the states you serve, dispensing pharmacy details, the clinical entity, privacy policy, terms, consent and refund policies, and a way for patients to reach a clinician or pharmacist.
• Get each pharmacy's written legal basis for every compounded ingredient you offer. Remove anything without one.
• Document how medical necessity is established for compounded drugs that resemble commercially available products.
• Remove "FDA-approved," "generic," "same as," "clinically proven" and similar language from anything describing compounded products.
• Budget for the published fees.

Before advertising

• On Meta, request prescription drug authorization after certification. Until then, run only educational ads or general telehealth-service ads.
• Target 18+, and only countries where you're certified.
• On TikTok, don't plan product ads for compounded or unapproved products. Check the branded-content rules before working with creators.
• Make landing pages match ad offers and prices. Label compounded products as not FDA-approved.
• Remove health conditions from pixel events, custom conversions and audiences.
• Keep peptide content educational under LegitScript's test, with no dosing, no "how to get it," and no efficacy claims.
• Have one person track policy changes, and re-review campaigns regularly.

Frequently asked questions

Is LegitScript certification legally required?

Not by federal law, according to LegitScript itself. Platforms and payment processors often require it (LegitScript).

Can I advertise my telehealth service on Facebook or Instagram without certification?

Yes, for ads that promote telehealth services generally or that only educate. Promoting a specific prescription drug needs LegitScript certification and Meta authorization (Meta).

Can I run TikTok ads for compounded semaglutide or tirzepatide?

TikTok's US rule for prescription medicine calls for proof of regulator approval (TikTok), and FDA says compounded drugs aren't FDA-approved (FDA). Most operators treat TikTok as an awareness and service channel for these products.

Does my pharmacy's or platform partner's certification cover my website?

Generally no. Certification attaches to each certified website, and Meta asks for your certified URL (LegitScript; Meta).

Did FDA approve BPC-157 or make it compoundable in 2026?

No. FDA removed it from Category 2 after the nomination was withdrawn. It isn't in Category 1 or on the 503A bulks list (FDA; FDA).

Can I write about peptides at all?

Factual, balanced educational content is generally permitted. Promotional content isn't, under LegitScript's standards (LegitScript).

How much does certification cost?

$975 per website to apply and $2,150 per website per year, with an optional $2,500 expedite (LegitScript).