Does a Compounding Pharmacy Need LegitScript Certification?

Who the certification covers

LegitScript's Healthcare Merchant Certification fact sheet lists the businesses it certifies, and pharmacies lead the list: internet pharmacies, mail-order pharmacies, brick-and-mortar pharmacies with remote dispensing, and sterile compounding pharmacies, alongside telemedicine providers that facilitate prescribing, manufacturers, wholesalers and distributors (LegitScript HMC fact sheet, checked 16 Sep 2026). MedScale Health, a patient-acquisition agency for telehealth brands and clinics, works with compounding pharmacies from two directions: as the filling partner behind a telehealth client, and as advertisers in their own right when they sell direct or to prescribers.

What this means for you

• If the pharmacy sells or dispenses prescription medication online, or facilitates it for a telehealth partner, it is in scope for certification.
• LegitScript describes the certification as a necessary part of approval for card-not-present transactions with Visa and Mastercard and for advertising on Google and Bing (LegitScript FAQ, checked 16 Sep 2026). Payment processing is at stake before advertising is.
• Fees are the standard ones: $975 to apply per website, nonrefundable, and $2,150 a year on approval (LegitScript pricing page, checked 16 Sep 2026).
• A telehealth partner's certification does not certify the pharmacy, and the pharmacy's compliance status is disclosed inside every partner's application.
• The claims on the pharmacy's own site and its partners' sites about compounded products are the most common reason a compounding application stalls.
• Expedited processing, at $2,500 more, starts LegitScript's review within two business days but does not shorten the review itself (LegitScript pricing page, checked 16 Sep 2026).

Why the pharmacy is inside every telehealth application

LegitScript's document list for applicants includes affiliate and partner information, specifically the compliance status of partners (LegitScript pricing page, checked 16 Sep 2026). For a telehealth brand, the filling pharmacy is the most important partner it has. A pharmacy that is unlicensed in a state the brand serves, or that is under FDA or board action, becomes a question in the brand's review, and the brand's application waits until the pharmacy is swapped or the states restricted.

That dependency cuts both ways. A compounding pharmacy that wants telehealth volume is more valuable to its partners if it is certified itself and can show licensure in every state those partners serve. In MedScale's experience the pharmacies that win the largest telehealth accounts are the ones that arrive with a certificate and a state-by-state licence table, because it removes weeks from the partner's own application.

503A, 503B and what LegitScript asks

The FDA distinguishes traditional compounders operating under section 503A, which compound for identified individual patients on prescriptions, from outsourcing facilities registered under section 503B, which may compound larger batches under FDA oversight and current good manufacturing practice (FDA, Compounding and the FDA questions and answers, checked 16 Sep 2026). LegitScript's application does not care which model the pharmacy uses so much as whether the licences, registrations and dispensing practices match the model claimed. Its terms require all necessary and valid licences from each jurisdiction required, dispensing only against a valid prescription issued by a licensed practitioner, and DEA authorization where controlled substances are involved (LegitScript terms and conditions, checked 16 Sep 2026).

The practical document set for a compounding pharmacy is therefore its pharmacy licence in the home state and every non-resident pharmacy licence for states it ships to, the pharmacist-in-charge's licence, its 503B registration if it holds one, DEA registration where relevant, its privacy policy, and a description of what it compounds and for whom.

The compounded GLP-1 problem

Compounded semaglutide and tirzepatide have made compounding pharmacies visible to regulators in a way nothing else has. In 2026 the FDA announced warning letters to telehealth companies over illegal marketing of compounded GLP-1 drugs, citing claims that implied the compounded products were the same as or equivalent to FDA-approved medicines and marketing that obscured who actually compounded the drug (FDA press announcement, checked 16 Sep 2026). LegitScript's own webinar summary makes the same point from the certification side: messaging that implies equivalency falls outside FDA guidance, and specific outcome claims must be substantiated by clinical trial data (LegitScript webinar takeaways, checked 16 Sep 2026).

For a compounding pharmacy that means three things before filing. Its site and its partners' sites must state that compounded products are compounded and not FDA-approved. Nothing may describe a compounded product as identical to a branded drug. And weight-loss percentages or transformation claims must go unless a clinical trial backs the exact claim. LegitScript's terms require that all practices, offers and claims be accurate and not misleading, and the analyst reads the public site against that standard (LegitScript terms and conditions, checked 16 Sep 2026).

Timing matters here too. LegitScript publishes no standard review length and its terms allow denial or revocation if the applicant fails to timely respond (LegitScript terms and conditions, checked 16 Sep 2026), so a pharmacy that files with an incomplete licence table is choosing a longer review, not a faster one.

Advertising after certification

Certification does not approve ads. Google requires advertisers to be certified by Google in order to serve ads for prescription drug services, and a compounding pharmacy that wants to promote its products on Google applies through Google's healthcare form as a prescription drug services provider once LegitScript certification is in hand (Google Ads policy, Prescription drug services, and Google Ads Help, Apply for healthcare-related advertising, checked 16 Sep 2026). LegitScript's webinar panel adds a rule of thumb that matters for pharmacies with mixed catalogues: a campaign is always subject to the requirements of its most regulated product, so a campaign that mixes over-the-counter and prescription items is held to the prescription standard (LegitScript webinar takeaways, checked 16 Sep 2026).

Most compounding pharmacies do not advertise to patients directly and instead grow through prescriber and telehealth partnerships. For them the certificate is less an advertising asset than a sales asset: it is the document partners' compliance teams ask for first.

What the pharmacy's own website has to say

LegitScript's analysts read the public site against the standards, so the pharmacy's website is part of the application whether or not it sells anything directly. LegitScript's document categories include product and service descriptions with current offerings and marketing claims, and its terms require a clearly displayed privacy policy compliant with the relevant laws (LegitScript pricing page and terms and conditions, checked 16 Sep 2026). In practice the site needs a plain statement of what the pharmacy is and where it is licensed, a pharmacist-in-charge named with a licence reference, a statement that prescriptions are required and are issued by licensed practitioners, a HIPAA-specific privacy policy that names the vendors on the site, and product pages that describe compounded preparations as compounded and not FDA-approved.

What the site cannot carry is the language that sells best in the GLP-1 market: brand-name comparisons, before-and-after imagery, weight-loss percentages and any phrase that implies the compounded product is the same as the approved drug. LegitScript's webinar panel notes that the FTC has made clear the old practice of adding a results-not-typical disclaimer no longer rescues an outcome claim (LegitScript webinar takeaways, checked 16 Sep 2026). A pharmacy that supplies telehealth partners should also expect those partners' sites to be held to the same standard, because a partner's non-compliant claim becomes the pharmacy's problem the moment the partner names the pharmacy.

Keeping the certificate

Certification is continuous. LegitScript's terms make the certified business responsible for remaining in compliance with the standards for the duration of the certification period, and the FAQ lists the changes that must be reported, including ownership, operational and disciplinary changes (LegitScript terms and conditions and FAQ, checked 16 Sep 2026). For a compounding pharmacy the events most likely to trigger a report are a new state licence, a lapsed one, an FDA inspection outcome, and any change in who owns the pharmacy. Losing certification also removes the pharmacy from its partners' compliant-partner lists, which is where the commercial damage lands.

What MedScale does

MedScale's certification service covers compounding pharmacies both as applicants and as partners inside a telehealth client's application. For the pharmacy itself: a readiness audit against LegitScript's standards, the state-by-state licence table assembled, the site sweep for sameness and outcome claims on compounded products, the document pack built into LegitScript's categories, the application filed in the pharmacy's own portal account, and the analyst questions answered within two business days. For a telehealth client, MedScale reviews the pharmacy's status before filing and flags a swap early if the pharmacy would stall the application. The service is described at /services/legitscript-certification. MedScale cannot supply a licence the pharmacy does not hold or make a compounded product FDA-approved.

This page is marketing and compliance guidance for healthcare businesses. It is not legal or medical advice; confirm licensure, prescribing and privacy questions with your own counsel.