The 12-Point Legitimacy Checklist for Any GLP-1 Telehealth Provider

Every week, a new GLP-1 telehealth brand launches. Some are well-funded operations with real clinical staff and properly-licensed pharmacy partners. Some are marketing shells rebranding compounded semaglutide and hoping you don't look too hard. The difference isn't obvious from the landing page. This checklist makes it obvious in about 15 minutes.

Score the provider 1 point for each pass. 10 of 12 or higher is a solid operator. 7-9 is workable with caution. Below 7, keep shopping.

The 12 points

1. The pharmacy partner is named — on the site, before checkout

Legitimate operators name their pharmacy. The pharmacy's name appears somewhere accessible on the site — usually in the FAQ, privacy policy, or terms of service. Better operators put it front and center. If you have to email customer service to find out which pharmacy is filling your prescription, that's a fail.

Once you have the name, check it against the state pharmacy board's license lookup and NABP's website. Verify the license is current.

2. The prescribing entity is a real medical practice with a named medical director

Somewhere on the site or in the legal footer, there should be a named PC or PLLC with a listed medical director. That person should be a real, licensed physician whose license can be verified on the state medical board website. If the site has no named medical director — or the named director doesn't check out — that's a fail.

3. The clinician scope is clearly stated

Does an MD review every chart, or is care provided exclusively by NPs or PAs operating under a collaborative agreement? Both models can be legitimate — NP-led care is legal in many states — but the provider should disclose the model. Vague language like "our team of medical professionals" with no specifics is a fail.

4. The intake process includes contraindication screening

A real GLP-1 intake asks about history of thyroid cancer (especially medullary thyroid carcinoma and MEN2), pancreatitis, severe GI disorders, pregnancy status, and contraindicated medications. If the intake form is short — just height, weight, and a credit card — that's a serious fail. The clinical basics matter.

5. Labs are either required or documented as a patient-driven option

Best practice for GLP-1 prescribing includes baseline labs (basic metabolic panel, A1c for diabetics, lipid panel) and periodic monitoring. Providers that require labs and providers that offer labs as an option can both be legitimate. Providers that actively discourage labs or don't mention them are a fail.

6. The pricing structure is fully disclosed before checkout

You should be able to see — on a public page, before entering your credit card — the price of the medication, the price of consultations, any membership fees, the shipping costs, and the cancellation terms. If you have to complete an intake form and enter payment information before prices are revealed, that's a manipulation tactic and a fail.

7. The cancellation policy is clear and permissive

Look for: monthly cancellation allowed with reasonable notice (7 days is typical), no early-termination fees on annual plans, and a self-service cancellation mechanism. Providers that require phone-only cancellation, hide the cancellation terms, or impose substantial fees are a fail.

8. Customer support is actually accessible

Before you sign up, test the support channels. Send an email with a clinical question. Message the chat. Call the phone number. Good providers respond within 24 hours to most inquiries. Providers with no accessible support — or whose chat is clearly an unsupervised AI — are a fail.

9. The website legal entity is real and disclosed

The Terms of Service and Privacy Policy should name a specific LLC, the medical PC/PLLC, and physical addresses. Pull the corporate records through your state's Secretary of State website. If the entities don't exist or show strange patterns (mail-drop addresses, nominee directors, recent formation for an established-seeming brand), that's a fail.

10. Reviews check out on multiple platforms

Check the provider on Trustpilot, Reddit, BBB, and Google Reviews. No provider is universally loved, but consistent patterns matter. Red flags: perfect 5-star ratings with generic language, a sudden surge of positive reviews after a period of negatives, or uniformly negative reviews about shipping and refunds. Legitimate providers have mixed reviews with specific complaints and responses from the company.

11. The medical content on the site is accurate, not promotional

Browse the blog, FAQ, and educational content. Does it describe side effects accurately? Does it mention contraindications? Does it set realistic expectations for weight loss (roughly 15-22% over 68 weeks on tirzepatide, 12-15% on semaglutide in clinical trials)? Sites that oversell, gloss over side effects, or never mention contraindications are a fail.

12. There's a documented path for adverse events

What happens if you have a serious side effect? The site should describe how to reach a clinician after hours, when to go to an ER, and how the provider reports adverse events to FDA MedWatch. Providers with no documented adverse-event process — especially compounded medication providers — are a fail.

How to use this in practice

The three questions the checklist doesn't answer

The checklist tells you if a provider is legitimate. It doesn't tell you if they're right for you. Three additional questions:

• Does the pricing fit your budget for the long haul? GLP-1 therapy is typically ongoing. Discounts that only apply for the first three months don't matter if the full price is unaffordable.
• Does the product match your medical situation? Compounded vs. brand-name, semaglutide vs. tirzepatide — these matter. A legitimate compounded-semaglutide provider and a legitimate brand-name-only provider are both good operators, but for different patients.
• Does their support model work for you? Some people want a real clinician on a video call; others prefer fully async messaging. Match the model to your preferences.

The honest disclaimer about checklist scoring

A provider can score 12/12 today and get into trouble tomorrow. FDA warning letters, state license issues, ownership changes, and shutdowns happen. A checklist score is a snapshot, not a guarantee. For that reason, we recommend two follow-up habits after you've chosen a provider:

• Keep your own medical records. Download labs, visit notes, and prescription histories periodically. If the company disappears, you have continuity.
• Re-check the checklist annually. Fifteen minutes once a year. If something has changed, you'll catch it.

Legitimacy is not a one-time test. It's a posture. The checklist is how you keep checking.