LegitScript certification for telehealth: what it is, cost and timeline

If you run a telehealth practice that prescribes medication, sooner or later an ad platform or a payment processor will ask: "Are you LegitScript certified?" Here is what that means and how to prepare.

Fees and rules below were checked in October 2026. Confirm current terms with LegitScript before you apply. This is general information, not legal advice.

What LegitScript is

LegitScript is a third-party company that verifies healthcare businesses selling or prescribing online. Platforms rely on it instead of checking every practice themselves.

Who needs it

As a rule of thumb, you probably need it if:

• patients can get a prescription through your website or telehealth visits, and
• you want to advertise those services, or your processor asks for it.

A practice that only advertises in-person visits and doesn't mention prescription drugs may not need it. If you're unsure, check the platform's current policy for your exact services.

What it costs

The key word is per website. If you run separate domains for different programs, each one needs its own application and annual fee. Decide your domain structure before you apply.

How long it takes

There is no fixed timeline. Clean applications have been approved in a few weeks. Applications that receive deficiency notices often take months. The difference is almost always preparation.

What reviewers look at

• Business documents: formation papers, ownership, history of the principals.
• Licensure: a licensed prescriber for every state you serve.
• Prescribing model: a real clinical evaluation, not a questionnaire alone.
• Pharmacy sourcing: named, licensed pharmacies.
• Privacy: a HIPAA-compliant privacy notice and Business Associate Agreements with vendors.
• Policies: refunds, complaints, adverse event reporting, telehealth consent.
• Your website: clear statements that a prescription requires an evaluation, visible privacy and terms pages, real contact details, accurate pricing, and no unsupported claims.

The most common reasons for delays

1. Licensure gaps. Serving a state where no prescriber is licensed.
2. Questionnaire-only prescribing. No genuine clinical review.
3. Vague pharmacy sourcing. "Partner pharmacies" without names and licenses.
4. Weak privacy documentation. No BAAs, no breach process.
5. Marketing claims. Language that suggests guaranteed results, or that medication is available without a consultation.

A simple preparation checklist

• [ ] List every state you serve and the licensed prescriber for each
• [ ] Name your pharmacies and keep their licenses on file
• [ ] Review your site: "prescription requires evaluation" is visible near every treatment and price
• [ ] Privacy policy, terms, refund and complaint policies are live and linked in the footer
• [ ] BAAs signed with every vendor that touches patient data
• [ ] Remove claims like "guaranteed", "same as" or "no consultation needed" from ads, pages and social posts
• [ ] Decide which domains you will certify

Where this fits in your growth plan

Certification is a gate, not a growth strategy. But it shapes everything after it: which ads you can run, which wording you can use, and when you can launch. Treat it as part of the Fix stage, before you scale acquisition.

If you want to see where your practice stands, the free Readiness Score includes an ads question, and the Practice Diagnostic includes a full ads and claims review.

Mohammed Ismail

Industrial Engineer. Founder of The Engineered Practice. Helps US cash-pay and telehealth practices map, fix, automate and grow their patient flow. About

General information only, not legal or medical advice.