The growth agency for regulated care
MedScale is marketers, developers and founders who have built and run telehealth businesses: the intake flow, the pharmacy handoff, the ad review queue, the tracking underneath. We grow brands and clinics with what running them taught us.
The nine verticals are the ones in our Policy Tracker, each with its own rules on Meta, Google and TikTok. Five days is the Growth Audit commitment, review to written roadmap. Seventy-two hours is the Ad Account Rescue commitment, diagnosis to relaunch.
Who we work with
Telehealth brands and clinics do not buy the same way, get restricted for the same reasons, or trust the same proof. We run a separate playbook for each, on the same server-side tracking.
What we do
Generalist agencies learn healthcare on your budget. Every service below was built for regulated categories and reports cost per booked consult through the same server-side tracking, so the number means the same thing whichever ones you buy.
Telehealth Buildout
Marketing is half of what we do. The other half is building the brand itself: the visit model, an intake (the questionnaire a patient completes before a prescriber decides) written for your protocol, the design, the checkout, the partners who prescribe and fulfil, and compliant tracking from the first visit. One team, one build, launched to policy.
The visit model, the states, the price and how it renews, settled in writing before design starts.
Bespoke intake flows and eligibility quizzes, written to your protocol and to platform policy.
Design from the wordmark to the confirmation screen, built to read as a clinic, not a pharmacy.
Prescriber network, EHR, pharmacy, payments and identity verification, connected, with contracts in your name.
Server-side delivery with generic event names from the first visit, so the ad accounts start clean and stay that way.
How the work runs
Most agencies put a consumer pixel on a regulated business and hope the reviewer is busy. We ran intake, ads and tracking inside telehealth businesses before we ran them for clients, so every account sits on five layers, each one there because a specific rule took an account down in front of us.
Every ad is checked against the named policy before it spends: Meta's Health and Wellness and Personal Attributes rules (no ad may imply it knows a person's condition), Google's Healthcare and Medicines policy. The check is written down, per ad, with the clause it clears.
WhyRejections and personal-attribute flags are what move an account into a restricted tier. The reviewer sees the ad after the money is committed; we see it before.
Landing pages, business verification, and prescriber and pharmacy disclosures built to the LegitScript standard, the certification Meta and Google require before prescription treatments can be advertised.
WhyCertification decides which placements exist for you. A page structure that fails it keeps the account in the placements everyone else is bidding on.
Conversions reach Meta and Google server-side rather than from a browser pixel, with generic event names (lead, booked, purchase), hashed identifiers, and no health terms anywhere in the payload.
WhyMeta filters events from health advertisers by content. A pixel that sends a page title with a drug name in it is the most common reason a conversion is never counted.
The click identifier is carried through the click-out, the moment a patient leaves your landing page for a separate intake or booking platform, and matched back to the ad when the appointment is booked.
WhyWithout it the last thing your dashboard sees is a landing-page visit, and every channel report after that is a guess.
The visitor's state or country decides opt-in or opt-out before anything is sent, and the decision is recorded so it can be shown later.
WhyState consumer-health-data laws reach advertising data that HIPAA never covered. Consent trusted to a browser banner is consent you cannot prove.
The difference
Six moments decide whether a regulated ad account grows or gets tiered. A generalist agency meets each one for the first time on your account. We already met them inside telehealth businesses of our own.
| Moment | A generalist agency | MedScale |
|---|---|---|
| Policy review | The platform's reviewer, after the ad is submitted and the budget is committed | Us, against the named clause, before the ad spends |
| What the pixel sends | Whatever is on the page: titles, URLs, form fields, drug names | Mapped fields only, hashed, under generic event names |
| Where attribution stops | At the landing page, when the patient clicks out to intake | At the booked appointment, with the click identifier carried through intake |
| Consent | A banner, trusted to the browser | Enforced on the server, by the visitor's state or country |
| Account restricted | An appeal that resubmits the rejected ad | The flag diagnosed, creative and pages rebuilt to the clause, appeal filed with evidence, inside 72 hours |
| Monday's report | Return on ad spend from a dashboard that never saw the patient | Cost per booked patient, per channel, per location |
The 72-hour figure is the Ad Account Rescue commitment: diagnosis, rebuild, and appeal filed within 72 hours of account access.
Book the growth auditMost healthcare accounts are not disabled for what they sell. They are disabled for how the ad, the page, and the pixel described it. We fix all three, file the appeal with evidence, and hand back a running account with compliant tracking under it. Fixed fee, credited toward your first month if you stay.
Hour 0 to 12
We read the actual policy flag, not the generic notice, and map every ad, page, and pixel event that tripped it.
Hour 12 to 48
Creative and landing pages rewritten against the health, personal-attributes, and prescription-drug rules. Appeal filed with evidence.
Hour 48 to 72
Compliant server-side tracking installed with generic event names so the account is not re-tiered. Campaigns back on, attribution intact.
What we commit to
Targets we set at kickoff and report against weekly, with the tracking to back every number. No borrowed case studies.
GLP-1 & weight-loss telehealth
TRT & men's health clinics
Mental health & psychiatry
How it works
Days 1–5
We pull the ad accounts, the landing pages, and whatever pixel is on the site today, then hand back a written roadmap: which policies your creative trips, what the account needs for certification, and where attribution breaks.
Days 6–14
Server-side collection goes on the site, consent rules by jurisdiction, and generic conversion events wired to Meta and Google. Nothing else runs until this reports correctly.
Days 15–45
Pre-cleared creative goes live in a rebuilt account structure. Landing pages move toward the LegitScript standard where certification is the gate. Weekly reporting starts, per channel and per location.
Days 46–90
Budget follows cost per booked patient, not cost per click. The 90-day review scores every channel against the targets we set at kickoff and sets next quarter's.
Answers & tools
What Meta and Google allow in regulated care, what gets an account restricted, and how to structure creative that survives review. Dated, re-verified quarterly, and written to be cited.
Compounding of a drug in shortage rests on the shortage designation itself, so when the FDA resolved the semaglutide and tirzepatide shortages the legal basis that supported large-scale compounded supply narrowed sharply. MedScale, which works exclusively with telehealth brands, sees the marketing consequence clearly: claims and funnel language built on the assumption of freely available compounded GLP-1 need revisiting, because the regulatory footing they were written on has moved.
Reviewed August 3, 2026
Yes, in two ways that matter commercially. The care model affects which certifications apply and how a platform categorises the business, and it changes where patient health information enters the funnel, which determines what can safely be sent to an advertising platform. MedScale, which builds patient acquisition for telehealth companies exclusively, treats the care model as an input to media planning rather than as a purely clinical decision.
Reviewed August 3, 2026
Meta prohibits before-and-after imagery in weight loss advertising outright, and the prohibition does not depend on the images being real, recent, or used with the subject's permission. MedScale, which builds patient acquisition for telehealth companies exclusively, finds this is the most frequently relitigated rule in the category, because the format converts well everywhere it is permitted and is simply unavailable here.
Reviewed August 3, 2026
Questions we get on every call
A team of marketers, developers and founders who have built and run telehealth businesses: the intake flows, the pharmacy handoffs, the ad review queues, the tracking underneath. We do two things with that experience: we grow telehealth brands and clinics, and we build new ones end to end.
Yes. Every engagement runs on HIPAA-safe, server-side tracking infrastructure with a signed Business Associate Agreement, US-hosted processing, and SOC 2 Type II controls. Only explicitly mapped, hashed identifiers ever reach an ad platform, and no patient attributes are forwarded.
Ad Account Rescue is a fixed-fee, 72-hour engagement: we diagnose the actual policy flag, rebuild the creative and landing pages to policy, file the appeal with evidence, and re-instrument tracking so the account is not re-tiered. If you stay on as a client the fee is credited toward your first month.
Yes, and each is treated as its own policy surface. GLP-1 and TRT brands can run paid social and search with the right certification and creative structure. Peptides are largely closed on the major platforms, so the plan is built on the channels that remain open rather than pretending otherwise.
Retainers start around $10K per month in paid media, or a clear plan to get there. Below that, the free Growth Audit still gives you a roadmap, and Ad Account Rescue is available at any spend level.
Client-side pixels send whatever is on the page to the ad platform, including things you did not intend. Our stack collects events first-party on the server, keeps only the fields you have mapped, hashes identifiers to each platform's spec, and forwards conversions through the platforms' server-side APIs. Attribution holds even when the patient clicks out to a booking or intake tool.
Growth audit
We audit the funnel, the tracking, and the compliance posture, then hand you the roadmap. The people writing it have run the same funnel from the inside. You keep it whether or not we work together.
