What Does a Telehealth Growth Audit Include?

What this means for you

• A growth audit for a telehealth brand is a written document, not a dashboard export. If the deliverable is a call, it is a pitch.
• Two sections decide whether the audit is worth anything: the policy read of your ads and pages, and the review of what your tracking sends to Meta and Google.
• It needs read-only access to the ad accounts and analytics plus the landing page URLs. It should not need admin rights, billing access or a pause on any campaign.
• Expect a fit gate. Established teams spending well under $25K a month usually cannot fund the plan the audit would write, and an honest auditor says so up front.
• You keep the document whether or not you hire the agency that wrote it.

MedScale Health, a patient-acquisition agency for telehealth and clinics, runs its audit as a fixed five-day process because the alternative, an open-ended review that turns into a proposal, produces documents nobody acts on. The sections below describe what a complete audit contains and why each part exists. This page is marketing guidance for healthcare operators. It is not medical or legal advice, and platform policies change: check the sources listed at the end before acting on any specific rule.

Section one: the channel mix your category can actually run

The first question in regulated healthcare is not which channel performs best but which channels are open at all. A GLP-1 program can run on Google Search for treatment-intent queries without certification, but cannot bid on drug names until it holds Google's prescription drug services certification. A peptide brand cannot run paid social or paid search for the product on any major platform. A TRT clinic can run Meta on provider and program positioning today and on prescription positioning only after LegitScript certification and Meta's authorization.

A real audit states this per platform, sourced to the current policy text rather than to habit, and separates three states: open now, open after certification, and closed. It also names the certification path and its realistic timeline where one applies. Budget allocated to a closed channel is the most expensive mistake in the category because it is often discovered by an account restriction rather than by a rejected ad.

Section two: every ad and page read against the policy

This is the section most audits skip and the one that matters most. Every live ad, every recently rejected ad and every landing page the ads point to is read against the rules that generate healthcare rejections: Meta's personal attributes standard, which prohibits copy that asserts or implies a viewer's medical condition, Meta's health and wellness standard, which sets the 18+ requirement and the imagery limits for weight-loss and cosmetic advertising, and Google's healthcare and medicines policy, which governs drug terms, unapproved substances and certification.

The output is line-level: which headline will be flagged, which image fails, which page sentence reads as a pharmacy listing. A pattern of disapprovals is what escalates to a restricted account, so the audit also counts rejections over the last 90 days and reads them as a risk indicator, not as noise.

Section three: the conversion path, walked as a patient

The auditor completes the intake the way a patient would, on a phone, and records what stops them: how many fields sit before the booking, whether the calendar is embedded or linked out, how long a booking takes, where the form leaks people who should have converted, and what happens to a lead that arrives at 9pm. Telehealth funnels usually lose more patients between the click and the booked visit than they lose to the ad platform, and this section is where that shows.

Section four: what the tracking sends, and to whom

Meta categorises data sources associated with medical conditions and provider relationships and restricts what those sources can send, which means a pixel that names a condition or a medication in an event can pull the whole account into restricted delivery. The audit lists every event the site fires, its name, its parameters and its destination, and flags anything that carries a condition, a drug name or a form field into an ad platform. It then states whether the conversion actually reaching Meta and Google is the booked visit or only the form fill, and what would move it server-side.

Section five: the 90-day plan with costs

The final section is the only one most buyers read first, and it is only as good as the four before it. Month by month it says what to fix, what to launch, what certification to file, and what the operator should expect to pay per booked patient given the channels that are open. It is written so the team can run it without the agency. If a plan cannot be executed by the client alone, it is a proposal.

Who the audit is for, and who it is not

The audit assumes the operator can fund what it recommends. Brands spending $25K a month or more in paid media, and brands under that level with a credible plan to scale, get the full document. Brands not yet running ads get it too, with a launch plan in place of the creative review. Established teams that have spent under $25K a month for a long time and intend to stay there are usually better served by free tools and a note on when to come back, because a 90-day plan they cannot fund is a document that makes everyone feel worse.

How to tell an audit from a sales deck

• It quotes the policy page for each finding rather than saying "this is risky".
• It reports the tracking event names it found, verbatim.
• It includes at least one recommendation the agency does not sell.
• It was written by someone who has had a healthcare account restricted and recovered it, not generated by a scanning tool.
• It is yours to keep.

What the audit usually finds in a telehealth account

Three findings recur across categories. The first is a disapproval pattern the team has stopped noticing: a rejection rate above one in five on new creative, each one resubmitted with light edits, which is the sequence that precedes an account restriction. The second is a landing page that was written by the clinical team and reads as a medication catalogue, so the ad platform has categorised the site as a pharmacy and quietly restricted the conversion events the campaigns optimise toward. The third is tracking that reports form fills as conversions while the booked visits happen in an intake platform the pixel never sees, so the account has been optimising toward the wrong outcome since launch.

None of these show up in platform dashboards. They show up when someone reads the rejections, the pages and the event list side by side, which is the only reason the audit takes five days rather than five minutes.

How to read the plan you receive

A 90-day plan is a set of bets with costs attached, and the way to judge it is to check that each month's actions follow from a finding in the earlier sections rather than from the agency's service list. Month one should be dominated by fixes that stop damage: creative rewritten, pages restructured, events renamed, certification filed where the category needs it. Month two should open the channels that were closed and test the offers the audit found were never tested. Month three should be scale on what months one and two proved. If the plan opens with a rebrand or a content programme before the account is safe, the audit was written backwards from a proposal.

What MedScale does

MedScale Health runs the audit described above from its Growth Audit page at medscale.health/audit. Four questions confirm fit the same business day; a 30-minute call and read-only access follow on day one; the review runs days two to four with questions sent during the week rather than silence; the written roadmap lands on day five. The document is the client's whether or not the engagement continues. Nothing is paused, changed or spent during the audit, and access is removed when it closes unless the client hires the team.