Skip to content

Learn

What LegitScript certification means, and what it doesn't

By the Everlon founding team · · How we write and review health content

General information, not legal advice. Updated October 2026.

Quick answer LegitScript certification means a private company, LegitScript LLC, has reviewed a pharmacy or telehealth business against its published standards and, by its own account, keeps monitoring it, which is a big reason Google and Meta name it in their ad policies. It is not FDA approval, not an endorsement and not a promise about any medicine. Before you trust a badge, open the company's live listing on LegitScript's own site.

You've probably seen a small "LegitScript Certified" badge on telehealth and pharmacy sites. Here is what sits behind it, why companies go through it, and how to check one yourself.

Who LegitScript is

LegitScript LLC is a private company, not a government agency. Its Healthcare Certification program is open to online and brick-and-mortar pharmacies, telemedicine providers, medical spas, digital health platforms that connect patients with providers and contracted pharmacies, pharmaceutical manufacturers and other healthcare merchants. Businesses pay LegitScript to apply and to stay certified.

Certification isn't a one-time stamp. LegitScript says it keeps monitoring certified businesses for compliance with its standards and with internet platforms' ad policies, and that ad platforms and card networks recognize its certification. Certified businesses also agree to tell LegitScript within 30 days of becoming aware of a change in licensure, business or regulatory status, or of any adverse legal or regulatory action.

Its certification standards

LegitScript publishes its certification standards. In summary, they cover:

  • Licensure and business registration. The business is licensed for the services it offers and in the places it serves, including where the medicine is prescribed or dispensed and where the patient is.
  • Legal compliance. It follows the laws that apply to prescribing and dispensing, and must not facilitate prescribing or dispensing medications that lack the necessary authorization or approval.
  • Prior discipline and history. The business, its principals, key staff and associated pharmacy or medical practitioners disclose past criminal, regulatory or civil violations and litigation over the past ten years. LegitScript says applicants must not have recent or repeated disciplinary sanctions or warning letters.
  • Affiliates and partners. Partners must meet the standards too. LegitScript says partner pharmacies are generally required to be LegitScript-certified or accredited by another recognized body, with limited exceptions at its sole discretion.
  • Patient services. The website clearly discloses every state or country where its services are available.
  • Privacy. It complies with privacy laws, including HIPAA where it applies, and uses secure (SSL) connections for sensitive information.
  • Validity of prescription. Prescription drugs are dispensed only on a valid prescription from someone authorized to prescribe, and not before a licensed professional has provided care.
  • Transparency. Practices and offers are accurate and not misleading, including claims about benefits that no regulator such as the FTC or FDA has supported.
  • Advertising. Ads are transparent and follow applicable laws. Advertising on a platform in apparent violation of its terms can be grounds for denial or revocation.

Why Google and Meta point to it

Prescription drug advertising is tightly restricted on the big ad platforms, and both name LegitScript in their own policy pages, in slightly different ways.

Google's U.S. policy allows telemedicine providers to advertise with limitations if they are accredited by LegitScript's Healthcare Merchant Certification program. For online pharmacies, Google accepts accreditation by LegitScript or by NABP (its Digital Pharmacy or .pharmacy programs). In both cases the advertiser must also be certified with Google.

Meta says it requires online pharmacies and telehealth providers to be actively certified with LegitScript, and then to request authorization from Meta. Meta also says no written authorization is needed for ads that promote telehealth services generally.

In practice, a U.S. telehealth company that wants to advertise prescription treatment on these platforms needs LegitScript certification first, and then the platform's own approval. LegitScript's page also says Visa and Mastercard recognize its certification for card-not-present transactions. That is LegitScript's statement about itself; this article doesn't claim either network requires it.

What the badge doesn't tell you

It is easy to read more into the badge than it says:

  • It is not FDA approval. LegitScript isn't a regulator, and certification says nothing about whether a medicine is FDA-approved. Compounded medications, for example, are not FDA-approved whether or not the company is certified, and the badge says nothing about whether a peptide can be compounded at all.
  • It is not an endorsement. LegitScript's terms say that displaying the certification does not imply LegitScript sponsors or endorses the company's products or services.
  • It is not legal or clinical advice. LegitScript's terms say its communications do not constitute legal or regulatory advice. The standards check that a business is licensed and follows the rules; they don't decide whether a treatment is right for you. A licensed provider does that.
  • It is not permanent. LegitScript's terms let it revoke certification at any time for any reason, which is why the live listing matters more than a badge image.

Checking a listing yourself

Don't rely on the badge alone. LegitScript itself says a seal image by itself is not enough to confirm a business is currently certified. A genuine seal links to that business's status page on LegitScript's site, and you can also search the company's website there directly. The lookup returns a status for the site, and certified is only one of several, so read what it says.

For online pharmacies, the National Association of Boards of Pharmacy runs a separate Digital Pharmacy Accreditation program, and FDA's BeSafeRx pages link to each state board of pharmacy's licence lookup. How to check an online provider is covered here.

Everlon Health LLC has been LegitScript-certified since September 2026, and you can see the listing on LegitScript's site. The certification is Everlon's, covering how Everlon operates. It isn't a claim about any medicine or any pharmacy. Read how Everlon handles pharmacies and quality.

Is this right for me?

The question a badge can't answer is whether online care fits you. Online care with a compounded medicine usually suits adults who can share a full, honest health history and medication list in an online review, who want a licensed provider in their state to decide, and who accept that compounded medicines are not FDA-approved.

It's usually the wrong route if you need a hands-on exam, close in-person monitoring or urgent help. In those cases, look to in-person care.

A badge doesn't make that call either. An independent licensed provider in your state reviews your health history, medications and goals and decides whether any treatment is appropriate, and the answer may be no.

How it works

  1. Tell us about your health. Confirm your state first; only then does the short health review ask about your health, medications and goals.
  2. A licensed provider in your state reviews and decides. The provider is independent and can decline; you'll be notified when they respond. You'll only be charged if treatment is prescribed.
  3. A licensed U.S. pharmacy prepares it and ships it to you. If treatment is prescribed, a licensed U.S. pharmacy prepares it, the pharmacy is named on your label, and standard shipping is included. GLP-1 plans are billed every 4 weeks; NAD+, sermorelin, glutathione and GHK-Cu plans every 30 days.

See every step on the how-it-works page.

FAQ

Is LegitScript a government agency? No. LegitScript LLC is a private company. Its certification matters mainly because ad platforms and card networks recognize it, not because it has legal authority.

Does LegitScript certification mean a medicine is safe? No. It is about the business: licensing, legal compliance and honest practices. It doesn't evaluate any medicine, and compounded medications remain not FDA-approved.

What is the difference between LegitScript and NABP? NABP, the National Association of Boards of Pharmacy, accredits pharmacies through its own programs. Google accepts either for online pharmacies in the U.S., but for telemedicine providers Google's policy names LegitScript, and Meta's policy names LegitScript.

Can a company lose its certification? Yes. LegitScript's terms let it revoke certification at any time, and certified businesses have to keep meeting its standards and keep it informed of changes.

What does Everlon's certification cover? Everlon Health LLC, the platform. It says nothing about any one medicine. Your prescription is filled by a licensed U.S. pharmacy named on your label, and you can look up its licence through your state board of pharmacy.

Safety information

A certification badge is not a safety rating for any medicine. Compounded medications are not FDA-approved: FDA does not verify their safety, effectiveness or quality before they are marketed. This page covers how a business is checked, not any treatment; a licensed provider will go over the risks of anything they prescribe.

Before you start with any online service, tell the provider about every medicine and supplement you take and every condition you have. Use only what a licensed provider prescribed, prepared by a licensed pharmacy that is named on the label; skip anything sold as "research use only".

If this is a medical emergency, call 911. For side effects or anything that doesn't seem right, contact your provider and email care@everlon.health.

Sources

  • LegitScript. Healthcare Certification. legitscript.com, accessed 2026-10-13
  • LegitScript. Healthcare Certification standards document. legitscript.com, accessed 2026-10-13
  • LegitScript. Healthcare Certification Terms and Conditions (version September 15, 2026). legitscript.com, accessed 2026-10-13
  • LegitScript. Behind the seal: what the LegitScript certification seal means for you and how to verify it's real. legitscript.com, accessed 2026-10-13
  • LegitScript. Website Certification Status. legitscript.com, accessed 2026-10-13
  • Google. Healthcare and medicines (Advertising Policies Help). support.google.com, accessed 2026-10-13
  • Google. Prescription drug services (Advertising Policies Help). support.google.com, accessed 2026-10-13
  • Meta. Advertising Standards: Drugs and Pharmaceuticals. transparency.meta.com, accessed 2026-10-13
  • Meta. Advertising Standards: Online Pharmacies. transparency.meta.com, accessed 2026-10-13
  • National Association of Boards of Pharmacy. Pharmacy Accreditation. nabp.pharmacy, accessed 2026-10-13
  • FDA. BeSafeRx: Locate a State-Licensed Online Pharmacy. fda.gov, accessed 2026-10-13
  • FDA. Compounding and the FDA: Questions and Answers (content current as of 09/16/2025). fda.gov, accessed 2026-10-13

This article is general information, not legal or medical advice. Compounded medications are not FDA-approved. Talk with a licensed provider about whether any treatment is right for you.

Compounded medications are prepared by a state-licensed 503A compounding pharmacy and are not FDA-approved. The FDA does not review compounded drugs for safety, effectiveness, or quality before they are dispensed.

Individual results vary. Treatment is prescribed only when clinically appropriate, and a prescription is never guaranteed. This article is for education and is not a substitute for professional medical advice, diagnosis, or treatment. If this is a medical emergency, call 911.