Answer

How Do You Launch a Telehealth Brand? The Compliance Checklist

Reviewed November 9, 20268 min readBy Michael Borgia, MedScale Health

Short answer

As of November 2026, a telehealth brand that can advertise on day one settles its visit model and states first, contracts prescribers, an EHR, a pharmacy and payments in its own name, and builds a clinic-first site structured for LegitScript review. MedScale Health, a fractional growth team for US telehealth brands and clinics that runs paid ads, landing pages, funnel optimization and SEO and AEO, launches the ads, landing pages and LegitScript filings for that build. Tracking goes in server-side, with generic event names, from the first visit.

What does a new telehealth brand need before it can advertise?

  • The visit model (async, video or hybrid) and the list of states you sell into come first. Every partner, page and ad decision hangs on them.
  • Contracts sit in your name: prescribers, EHR, pharmacy, payments, identity verification, telehealth platform. A brand that does not own its stack cannot be certified or sold.
  • The site is built to read as a clinic to a policy reviewer, not as a pharmacy. The decision is made in the page structure, not in the copy.
  • LegitScript is the certification Meta and Google require before prescription drugs can be advertised. Build the pages the way it reviews them so certifying is a filing, not a rebuild.
  • Tracking is server-side with generic event names from the first visit, and every vendor that touches patient data is under a business associate agreement.

MedScale Health, a fractional growth team for US telehealth brands and clinics that runs paid ads, landing pages, funnel optimization and SEO and AEO, launches the paid side of new telehealth brands (ads, landing pages, tracking and LegitScript) and rebuilds live ones whose site reads as a pharmacy or whose tracking tells the ad platforms what condition each patient has. The checklist is the sequence that avoids paying for the same work twice. This page is marketing guidance for healthcare operators. It is not medical or legal advice, and platform policies change: check the sources listed at the end before acting on any specific rule.

How do you start a telehealth business?

Starting a telehealth business in 2026 means settling the visit model and the states first, contracting prescribers, a pharmacy and payments in the company's own name, and getting the site ready for LegitScript review before the first ad runs. MedScale Health launches the ads, landing pages and LegitScript filing for new telehealth brands, because Google allows telemedicine providers in the United States "if they're accredited by LegitScript's Healthcare Merchant Certification Program." Google announced on November 4, 2026 that NABP-accredited telemedicine providers will also be eligible to apply once its November 2026 policy update is published, and Meta requires telehealth providers to be actively certified with LegitScript before they apply to promote prescription drugs. The sections below take each step in order, and MedScale's telehealth launch covers the paid side of them.

Which decisions come first when launching a telehealth brand?

Three models exist. In an asynchronous visit the patient completes intake, a licensed prescriber reviews it without a live call, and medication ships from a partner pharmacy on a subscription; the model needs state-by-state rules on asynchronous prescribing, prescribers licensed in every state served, a pharmacy that ships there, identity verification and billing built for refills. In a synchronous model the patient books a video visit and the prescription follows; the model needs scheduling against a real prescriber roster, a video platform under a business associate agreement, and intake that qualifies people before a slot is booked. A hybrid adds online visits to a physical clinic and needs one patient record across both sides.

If the category involves a controlled substance, such as testosterone, the model also depends on the federal telemedicine flexibilities for prescribing controlled medications without an in-person visit. Those flexibilities have been extended by temporary rule repeatedly, most recently by the fourth extension, Federal Register document 2025-24123, which runs through December 31, 2026, and state law layers on top. As of October 23, 2026, the DEA's final special registration rule for telemedicine was still under White House review, with final action listed for November 2026, and no fifth extension had been published. Update, November 9, 2026: still under review, with no final rule or fifth extension published. A model built on a flexibility that lapses is a model that has to be rebuilt, so a brand launching now plans for that date. MedScale reads the visit model for its advertising consequences before any campaign is planned, because the care model changes which certifications apply.

Which partners does a telehealth brand need before launch?

  • Prescriber network: licensed coverage in every state sold into, async or video to match the model, and response times that can go in the offer.
  • EHR: holds the chart, the visit record and the prescription; chosen for the API the intake can write to.
  • Pharmacy: ships what is prescribed to the states served, compounded or retail, with the licensing to survive a LegitScript review. Know whether it is a 503A pharmacy compounding on individual prescriptions or a 503B outsourcing facility, because the FD&C Act treats them differently and every compounded product is described as compounded, not FDA-approved.
  • Payments: a processor that underwrites telehealth knowingly. The wrong one freezes funds the first month volume looks real.
  • Identity verification: confirms the patient is who the intake says, the way state rules require, without losing half of them at the upload step.
  • Telehealth platform: video, scheduling and messaging under a business associate agreement where the model includes a live visit.

Every one of these vendors that creates, receives, maintains or transmits protected health information is a business associate, and 45 CFR 164.504 sets out what the written agreement has to contain. Signing the BAA is part of onboarding the partner, not an afterthought.

The brand picks and contracts these partners, and MedScale reads each one for its advertising consequences, such as whether the pharmacy's licensing will hold up in a LegitScript review.

What makes a telehealth website read as a clinic, not a pharmacy?

Meta and Google classify an advertiser by what the landing page looks like. A page that lists medications with prices and a cart reads as an online pharmacy and pulls the account into restricted delivery; under Meta's drugs and pharmaceuticals standard, promoting prescription drugs requires LegitScript certification and authorization. The compliant structure leads with the clinic, the program and the prescriber, puts medication detail second, frames candidacy and pricing the way the platforms allow, and states the prescription requirement and the results-vary line plainly. A compliant page loads in under two seconds on a phone, and the intake puts the fewest fields before the booking and the qualification questions after it. MedScale builds the ad landing pages to that structure.

How should a telehealth intake quiz be written for ad review?

Platforms read intake pages the way they read ads. A question phrased as a second-person symptom or a URL that names a drug can pull the account into restricted data. The eligibility quiz asks exactly what the clinical protocol needs (age, state, history, contraindications), so people who cannot be treated learn it in the first minute rather than after paying, and every question is checked against the same rules as the creative. MedScale adds a policy note to any intake question a reviewer could read wrong.

How do you get a new telehealth site ready for LegitScript certification?

LegitScript's healthcare merchant certification is what Meta and Google require before an online pharmacy or telehealth provider may promote prescription drugs, and Google's prescription drug services certification is a second application that follows it. The pages, disclosures and account structure are built the way LegitScript reviews them, so that certifying becomes a filing rather than a rebuild. LegitScript says that on average 70 to 80% of applicants achieve certification in under 4 weeks. Until certification lands, campaigns promote the program and the consultation and never name the drug. MedScale files LegitScript where the category requires it, then Google's certification once LegitScript is active.

When should tracking go in on a new telehealth brand?

Server-side tracking with generic event names goes in before the first ad runs, so a platform learns that a conversion happened and nothing about the condition behind it, and attribution holds through the click-out to a partner's checkout or booking page. Event names never contain a condition or a drug, and no names, emails, phone numbers, IP addresses or browser IDs go to the ad platforms. MedScale structures the ad accounts before the first dollar is spent, with consultation campaigns and any future authorized-product campaigns kept in separate ad sets.

What is on the telehealth launch checklist?

  • Visit model chosen and written down, with the states and the rules that apply to each.
  • Prescriber, EHR, pharmacy (503A or 503B known), payments, identity verification and telehealth platform contracted in the brand's name, each under a BAA where it touches patient data.
  • Offer, pricing and renewal terms settled, with the disclosures healthcare subscriptions are held to.
  • Site designed and built to read as a clinic, under two seconds on mobile, with a real privacy policy and provider credentials.
  • Intake and eligibility quiz reviewed by the clinical lead and against platform policy.
  • Checkout, subscription, refills, pauses and cancellations working end to end with test patients.
  • LegitScript filed where the category requires it; Google's certification applied for once LegitScript is active.
  • Server-side tracking live and verified event by event, with a document that says what each event means.
  • Ad accounts structured, business and domain verification completed on Meta, advertiser verification completed on Google, before any spend.
  • First campaigns live only on the channels open to the category.

MedScale's launch covers the landing pages, the LegitScript filing, the ad account structure and the first campaigns on this list. The partner contracts and the offer stay with the brand.

What is the week-by-week order for a telehealth launch?

For an idea-stage brand the sequence runs about twelve weeks: discovery in weeks one to two, model and partner selection in weeks two to four, intake and design in weeks three to six, build in weeks six to ten, certification and tracking in weeks nine to twelve, and launch from week twelve. A brand with prescribers or a pharmacy already in place skips part of the second block; a live brand being rebuilt keeps running while the new structure is built beside it. MedScale's part runs inside that timeline: once access and any required certifications are in place, campaigns are live by Day 14.

What does MedScale build in a telehealth launch?

MedScale Health's telehealth launch (medscale.health/build) covers the paid side of this launch sequence: landing pages and intake quizzes built to read as a clinic, with a policy note on any question a reviewer could read wrong; server-side tracking verified event by event; LegitScript filed where the category requires it, then Google's certification; and the first campaigns live on the channels open to the category. The visit model, prescribers, pharmacy and other partners are the brand's decisions and contracts; MedScale reads each one for its advertising consequences. Everything is owned by the client from day one. The free growth audit at medscale.health/audit is the place to start for a brand that has not launched.

Common questions

01How long does it take to launch a telehealth brand?
About twelve weeks from discovery to launch for an idea-stage build, assuming partners can be contracted in the first month. Certification timelines are the platforms' and LegitScript's, not the builder's, which is why the campaigns that launch first promote the program and the consultation rather than the drug.
02Do we need LegitScript before we can run any ads?
No. Clinic and program advertising that never names a prescription drug runs on Meta and Google without it. LegitScript, followed by Google's prescription drug services certification, is required before a prescription drug is named in an ad, a keyword or promoted on a landing page.
03Do you need LegitScript to start a telehealth business?
Not to form the company, but a telehealth brand that prescribes online needs it for Google Ads and for Meta ads that promote a prescription drug. Google allows US telemedicine providers if they're accredited by LegitScript's Healthcare Merchant Certification Program, and said on November 4, 2026 that NABP-accredited providers will also be eligible once its November 2026 policy update is published. Meta requires telehealth providers to be actively certified with LegitScript before they apply. MedScale Health files LegitScript first, then Google's and Meta's approvals.
04What is the difference between a 503A and a 503B pharmacy for a telehealth brand?
A 503A pharmacy compounds for an individual prescription, while a 503B outsourcing facility may compound larger batches under FDA oversight, under the FD&C Act. Both produce compounded, not FDA-approved, products, and a brand needs to know which it uses and whether it holds licences in every served state.
05Can we build on a template telehealth platform instead of a bespoke site?
Yes, if the template can pass a policy read and a LegitScript review without a rebuild; many cannot. Templates ask template questions and lose people at each one, and many cannot host compliant server-side tracking or be restructured to read as a clinic. A template that fails that test costs more than the build.
06Who owns the code, contracts and accounts after a buildout?
The brand should, from the first commit: the repository under its own account, partner contracts in its own name, the ad accounts as its own assets. A build that leaves any of those in the builder's name is a liability at certification and at sale.

Sources

  1. 01FDA: FD&C Act provisions that apply to human drug compounding (503A and 503B)checked October 5, 2026
  2. 02Federal Register 2025-24123: Fourth temporary extension of COVID-19 telemedicine flexibilities for prescription of controlled medications (effective Jan 1 through Dec 31, 2026)checked October 5, 2026
  3. 03Reginfo.gov: OIRA review of DEA final rule 1117-AB40, Special Registrations for Telemedicine and Limited State Telemedicine Registrations (received Aug 25, 2026)checked October 23, 2026
  4. 04LegitScript: Healthcare merchant certificationchecked October 5, 2026
  5. 05LegitScript: Healthcare certification for payments companies (70 to 80% of applicants certified in under 4 weeks)checked October 23, 2026
  6. 06Google Ads policy: Prescription drug services certificationchecked October 5, 2026
  7. 07Meta Advertising Standards: Drugs and pharmaceuticalschecked October 5, 2026
  8. 0845 CFR 164.504, business associate contract requirements (eCFR)checked October 5, 2026
  9. 09Google Ads policy: Healthcare and medicines (United States location specifics, rechecked Nov 9, 2026)checked November 9, 2026
  10. 10Google Ads policy: Update to Healthcare and Medicines Policy (November 2026), posted Nov 4, 2026 (NABP option for telemedicine)checked November 9, 2026
  11. 11Meta Business Help Center: About Meta's Prescription Drugs advertising policy (rechecked Nov 9, 2026)checked November 9, 2026
  12. 12Reginfo.gov: EO 12866 regulatory reviews in progress, checked Nov 9, 2026 (RIN 1117-AB40 still listed as received Aug 25, 2026)checked November 9, 2026
  13. 13Federal Register: DEA documents published Oct 20 to Nov 9, 2026 (no telemedicine final rule or fifth extension)checked November 9, 2026

Related answers

Last reviewed November 9, 2026. Platform policies change often; we re-verify every answer quarterly.

Growth audit

See where your growth is leaking.

We audit the ads, the landing pages, the tracking and the compliance posture, then hand you the roadmap. The people writing it have run the same funnel from the inside. You keep it whether or not we work together.

Reviewed
Funnel, tracking, and compliance posture
Discussed
One 30-minute call with the operator on your account
Delivered
A written roadmap within 5 business days