The Accountability Gap: Who Regulates GLP-1 Telehealth and Who Actually Enforces

There are, by most estimates, over 200 companies selling compounded GLP-1 medications through telehealth platforms in the United States as of mid-2026. The FDA has sent warning letters to fewer than 100 of them. State medical boards have taken disciplinary action against a handful of prescribers. The FTC has not brought a single enforcement action specifically targeting GLP-1 telehealth advertising.

Between the agencies that could regulate this market, there is a gap wide enough to build a multi-billion-dollar industry inside of — and that is exactly what has happened. This article maps the regulatory bodies that have jurisdiction, what each one actually does (and doesn't do), and where the enforcement vacuum leaves patients unprotected.

The Four Agencies That Could Be in Charge

The FDA (Food and Drug Administration)

Regulates drugs, compounding pharmacies, and drug advertising

The FDA has the most direct authority over compounded GLP-1 medications. Under the Federal Food, Drug, and Cosmetic Act, compounding pharmacies operate under either Section 503A (patient-specific prescriptions from state-licensed pharmacies) or Section 503B (outsourcing facilities that can produce larger batches). The FDA can inspect 503B facilities, issue warning letters for misbranding or adulteration, and pursue injunctions against non-compliant compounders.

What they've actually done: The FDA issued 55+ warning letters to online sellers of compounded GLP-1s in September 2025, followed by additional waves in February and March 2026 targeting specific companies (MEDVi, Strut Health, SkinnyRx, 24hrDoc, and 30+ others). These letters address misbranding — specifically, claims that imply FDA approval or equivalence to branded products like Wegovy or Ozempic. The FDA also proposed removing semaglutide and tirzepatide from the 503B bulks list in April 2026 (comment period closed June 29, 2026).

The gap: Warning letters are not enforcement actions. They are requests to correct violations. A company that receives a warning letter can continue operating while it "addresses" the issues. The FDA rarely pursues injunctions against telehealth companies — its enforcement resources are directed primarily at compounding pharmacies, not the platforms that market their products. The platform-pharmacy separation creates a jurisdictional seam: the FDA regulates the pharmacy, but the telehealth platform that advertises, markets, and processes payments is often a separate legal entity.

State Medical Boards

License and discipline prescribing clinicians

Every state has a medical board (or equivalent licensing body) that oversees physicians, nurse practitioners, and physician assistants. These boards can investigate complaints, impose disciplinary actions (reprimand, probation, suspension, revocation of license), and set standards for telehealth prescribing within their state.

What they've actually done: Enforcement varies enormously by state. Some states (Texas, California, New York) have taken actions against individual prescribers for inappropriate telehealth practices. Most states have done nothing specifically targeting GLP-1 telehealth prescribing. The pace of board investigations — typically 6–18 months from complaint to resolution — means that by the time action is taken, the prescriber may have moved to a different platform or state.

The gap: State boards regulate individual clinicians, not platforms. A telehealth company operating through a Management Services Organization (MSO) or friendly PC structure can replace a disciplined clinician without interrupting its business. The company itself — the one collecting payment, running ads, and making marketing claims — falls outside medical board jurisdiction entirely. Boards also struggle with multi-state telehealth: a prescriber licensed in Florida writing prescriptions for patients in Ohio is technically subject to both states' rules, but coordination between boards is minimal.

The FTC (Federal Trade Commission)

Regulates advertising, marketing claims, and unfair business practices

The FTC has broad authority over deceptive advertising, including health claims, pricing transparency, subscription billing practices, and endorsement disclosures. The agency's recent focus on "dark patterns" in subscription services (the Click-to-Cancel rule) and its Health Products Compliance Guidance both apply directly to GLP-1 telehealth platforms.

What they've actually done: As of September 2026, the FTC has not brought a specific enforcement action against a GLP-1 telehealth platform. The agency has issued general guidance on health product advertising and subscription billing, but no company-specific investigations or consent orders related to GLP-1 marketing have been made public.

The gap: The FTC is under-resourced relative to the scale of the telehealth industry. Its enforcement actions tend to target the largest, most egregious violators — the "biggest fish" approach means hundreds of smaller platforms operate without scrutiny. Additionally, the FTC's remedy is typically a consent order or fine, not a shutdown. A company can pay a fine and continue operating with modified advertising, which the consumer may never notice.

State Attorneys General

Enforce state consumer protection laws

State AGs can investigate and sue companies for deceptive trade practices under each state's consumer protection statute. They can seek injunctions, restitution for consumers, and civil penalties. Several state AGs have consumer health divisions that specifically monitor health product advertising.

What they've actually done: A small number of state AGs have opened investigations into telehealth pricing practices and subscription billing, but none have resulted in published enforcement actions specifically targeting GLP-1 platforms as of September 2026. Consumer complaint data from state AG offices is not typically published in real-time, so there may be active investigations that are not yet public.

The gap: State AGs are reactive — they investigate based on consumer complaints. Most consumers don't know they can file complaints with their state AG, and the complaint process is cumbersome enough that only the most motivated (or most harmed) consumers follow through. Additionally, companies that operate across all 50 states can distribute complaints thin enough that no single state's AG reaches the threshold for investigation.

Where the Gaps Overlap

The deepest part of the accountability gap isn't within any single agency — it's in the seams between them. A telehealth platform's operations span multiple jurisdictions simultaneously, and no single regulator has clear authority over the complete picture.

Marketing claims are the FTC's domain, but the FTC isn't investigating GLP-1 platforms. Prescribing standards are the medical board's domain, but boards regulate clinicians, not companies. Drug quality is the FDA's domain, but the FDA regulates pharmacies, not the telehealth middlemen. Consumer harm could trigger a state AG investigation, but complaints are dispersed across 50 states.

The result is that a company can make misleading marketing claims (FTC gap), use prescribers who conduct cursory evaluations (board gap), source medication from compounders the FDA hasn't inspected recently (FDA gap), and bill consumers in ways that violate state consumer protection laws (AG gap) — and face no enforcement from any direction for months or years.

What This Means for Patients

The accountability gap does not mean all telehealth GLP-1 platforms are dangerous. Many operate legitimately, use licensed prescribers who conduct genuine evaluations, source from inspected pharmacies, and disclose their limitations accurately. The gap means that patients cannot rely on regulatory oversight to distinguish the legitimate platforms from the problematic ones. The responsibility falls on the individual consumer to vet providers — a task that should not be necessary in a properly regulated market, but is necessary in this one.

This is why this site exists: to do the vetting work that the regulatory system is not currently performing.

Paid link

Platforms that pass our vetting standards

Sesame Care — FDA-approved medications only

Brand-name Wegovy pill from $149/mo. NovoCare Recognized Care Provider. Does not offer compounded GLP-1s — the cleanest regulatory profile of any platform we've reviewed.

See Sesame Care →

FDA-approved brand-name medications. Not compounded.

Embody — LegitScript-certified, no FDA warning letters

Injectable semaglutide from $69–99 first month (ongoing ~$299/mo). Passed our disclosure and pharmacy verification checks.

See Embody →

Compounded semaglutide — not FDA-approved. Injectable only.

GobyMeds — No subscription, no auto-renew model

Semaglutide from $99/mo. One of the few platforms with zero dark-pattern subscription mechanics.

See GobyMeds →

Compounded medication — not FDA-approved.

What Would Close the Gap

Several policy interventions could narrow the accountability gap if implemented. None are currently in progress as of September 2026, but they represent the directions that consumer advocacy groups and some legislators have discussed.

An FTC industry-wide investigation into GLP-1 telehealth advertising, modeled on the agency's 2023 enforcement sweep against deceptive health product claims, would establish precedent and create compliance incentives across the industry.

FDA jurisdiction over telehealth marketing for compounded medications — currently, the FDA regulates pharmacy-level claims but has limited authority over third-party platforms that market the pharmacy's products. Extending FDA advertising jurisdiction to the marketing entity (not just the compounding entity) would close the platform-pharmacy seam.

Multi-state medical board compacts that coordinate enforcement across state lines would prevent prescribers from moving between states to avoid discipline. The Interstate Medical Licensure Compact (IMLC) is a start, but it streamlines licensing, not enforcement.

Mandatory LegitScript certification or equivalent third-party accreditation as a condition of telehealth prescribing would create a baseline standard that platforms must meet to operate. LegitScript currently certifies voluntarily, and many legitimate platforms carry it — but it's optional, and its absence is not a legal barrier to operation.

Until these or similar measures are implemented, the accountability gap remains — and the practical question for patients is not "is this industry regulated?" (it is, in theory) but "is this specific platform operating as though regulation exists?" Our 20-Point Safe-Platform Checklist is designed to answer that question, provider by provider.