The Safe-Platform Checklist 2026: Our Updated 20-Point Vetting Standard

The prescribing clinician is identifiable and license-verifiable

The platform names the physician, NP, or PA who will be managing your care — not just a generic "our medical team." You can verify their license through their state medical board's online lookup tool.

How to check: Look for a "Our Providers" or "Medical Team" page. Find a name, credentials (MD, DO, NP, PA), and state of licensure. Then go to that state's medical board website and search the license. It should be active with no disciplinary actions. If the platform doesn't name its clinicians at all — walk away.

The compounding pharmacy is named

You have a right to know where your medication is made. A platform that won't name its compounding pharmacy is hiding something — either the pharmacy doesn't exist (it's a reshipper), has compliance issues, or the platform doesn't want you to independently verify quality.

How to check: Look in FAQs, Terms of Service, or ask support directly: "What pharmacy compounds my medication?" If they say "we work with multiple licensed pharmacies" without naming any, that's evasive. Accept it only if they'll name the specific pharmacy that will fill your prescription.

The platform acknowledges that compounded medications are not FDA-approved

This is not optional — it's legally required. Any platform that implies its compounded semaglutide or tirzepatide is "the same as Wegovy/Ozempic" or "FDA-approved" is making the exact claims the FDA cited in its 2025–2026 warning letters.

How to check: Search the homepage and product pages for the phrase "not FDA-approved" or equivalent disclosure. Check the footer disclaimers. If the site uses language like "same active ingredient as Wegovy" without a compounding disclosure — that's a red flag.

Real pricing is visible before you create an account

You should be able to find the actual monthly cost of medication — not just "as low as $X" — without entering your email, creating an account, or starting an intake form. Platforms that hide pricing behind a registration wall are using a sunk-cost engagement funnel, not transparent commerce.

How to check: Navigate the site without signing up. Can you find the price of semaglutide and/or tirzepatide? Including any membership fees, consultation fees, or shipping charges? If the only way to see pricing is to "complete your assessment" — that's a dark pattern.

No FDA warning letters on record

The FDA maintains a public database of warning letters. A platform or its affiliated pharmacy that has received a warning letter for GLP-1-related violations has been formally cited for misleading consumers, misbranding products, or operating in violation of federal drug law.

How to check: Search "FDA warning letters [company name]" or visit the FDA's warning letter database at fda.gov. As of September 2026, companies with GLP-1-specific warning letters include MEDVi, Strut Health, SkinnyRx (Lean Rx Inc.), 24hrDoc, and approximately 85 others. A warning letter doesn't automatically mean the company is dangerous, but it means the FDA has formally documented problems.

LegitScript certification

LegitScript is a third-party verification service that certifies healthcare merchants and telehealth providers. Certification means the company has been reviewed for regulatory compliance, pharmacy licensing, and prescribing standards. It's not perfect (certified companies can still have problems), but it's the closest thing to a baseline accreditation standard in the telehealth space.

How to check: Look for a LegitScript seal on the site, or search the company at legitscript.com/search. Note: not having LegitScript doesn't automatically mean the platform is bad — some legitimate platforms haven't applied. But having it is a meaningful positive signal.

Clear cancellation process documented before signup

You should be able to find the cancellation procedure — how to cancel, any required notice periods, and whether cancellation is possible online or only by phone — before you subscribe. The FTC's Click-to-Cancel rule (effective 2025) requires that cancellation be as easy as signup.

How to check: Look for a cancellation policy in the Terms of Service or FAQ. Test whether you can find "cancel" or "unsubscribe" instructions without creating an account. If cancellation requires calling a phone number during limited hours or sending certified mail — that's a deliberate friction barrier.

Consultation involves a real clinical evaluation

A legitimate GLP-1 prescription requires a clinical evaluation — medical history, current medications, contraindication screening, and assessment of eligibility. A five-question intake form that auto-approves every applicant is not a clinical evaluation. It's a dispensing funnel.

How to check: Look for descriptions of the consultation process. Do they mention video consultations, medical history review, or lab work? Read patient reviews — do people report having a real conversation with a prescriber? The Yale secret shopper study (July 2026) found that 45 of 49 platforms studied failed to meet basic clinical evaluation standards.

Ongoing monitoring, not just initial prescription

GLP-1 therapy requires titration, side-effect management, and periodic lab monitoring. A platform that prescribes medication and then auto-refills without check-ins is a dispensing service, not a healthcare provider.

How to check: Does the platform mention follow-up visits, titration schedules, or ongoing monitoring? Can you message a provider between visits? Is there a process for reporting side effects? Auto-refill without clinical review is a red flag.

Shipping includes cold-chain packaging

Injectable GLP-1 medications require refrigeration. Shipping without cold packs, insulated packaging, or express delivery can compromise the medication's potency and safety — particularly during summer months.

How to check: Look for shipping information: do they mention cold-chain packaging, insulated boxes, gel packs, or overnight/2-day shipping? If the site says "standard shipping" with no mention of temperature control for injectables — ask before ordering.

The pharmacy holds PCAB accreditation or equivalent

The Pharmacy Compounding Accreditation Board (PCAB) provides voluntary accreditation for compounding pharmacies meeting USP standards. Also acceptable: ACHC accreditation or state board of pharmacy excellence designations.

Lab work is required or offered as part of treatment

Platforms that require or include metabolic labs (A1C, lipids, kidney function) demonstrate genuine clinical engagement, not just dispensing.

Titration is individualized, not calendar-driven

Good platforms adjust dose increases based on your response and side effects, not a rigid 4-week-increase schedule for everyone.

The platform has a physical business address and identifiable leadership

A company with no verifiable address and no named leadership team (CEO, medical director) is harder to hold accountable if something goes wrong.

HSA/FSA acceptance and transparent billing codes

Acceptance of health savings accounts signals legitimate healthcare commerce. Transparent billing also helps if you need to dispute charges or seek reimbursement.

Certificate of Analysis (COA) available on request

A COA from an independent lab confirms the potency and sterility of your specific medication batch. Ask if one is available — the pharmacy should be able to provide it.

Beyond-use dating clearly labeled on the vial

Every compounded medication should have a clearly printed beyond-use date. If yours doesn't, or if the date is suspiciously far in the future (6+ months for a compounded injectable), ask questions.

Side-effect reporting mechanism exists

The platform has a documented process for reporting adverse events — not just "contact support," but a specific pathway for clinical reporting.

Money-back or satisfaction guarantee with published terms

Guarantees are marketing tools, but their terms reveal the company's confidence in its product and service. Look for specific terms (timeframe, conditions, refund method) rather than vague promises.

The company willingly answers all 19 questions above

If you contact customer support and ask about any of these items, the response should be forthcoming, specific, and verifiable. Evasion, deflection, or "we can't share that information" on any of the above points is itself a data point — and not a positive one.