Telehealth Marketing Compliance Rules: What Operators Can and Cannot Say

Telehealth marketing must be truthful and substantiated. The FTC requires health claims to be backed by competent and reliable scientific evidence; ad platforms like Google and Meta require LegitScript certification to advertise; and compounded medications cannot be marketed as equivalent to or replacements for FDA-approved branded drugs. Testimonials, before-and-after imagery, and AI-written copy all carry specific rules operators are responsible for following.

Marketing is where most telehealth compliance problems actually surface. An operator can build a clean clinical workflow and a compliant fulfillment rail, then get a warning letter or an ad-account suspension over a single sentence on a landing page. The rules governing what you can say are enforced by several bodies at once — the FTC, the FDA, and the ad platforms — and they do not forgive good intentions. This is the plain-spoken version of what those rules require.

---

What Are the Core Rules for Telehealth Marketing?

Every health claim you make must be truthful, not misleading, and substantiated before you make it. This is the FTC's foundational standard, and it applies to your website, your ads, your emails, your social posts, and anything an affiliate says on your behalf. There is no version of telehealth marketing where this standard does not apply.

The FTC Health Products Compliance Guidance sets the bar: objective product claims — about benefits, performance, safety, or efficacy — must be backed by "competent and reliable scientific evidence," which for health claims generally means well-conducted human clinical studies. If you cannot support a claim at that level of evidence, you should not make it. The FTC's broader health claims guidance reinforces that the more specific or dramatic the claim, the stronger the substantiation required.

The practical translation: specific outcome claims are dangerous. "Lose 20 pounds in a month" or "reverses hair loss" are the kind of statements that require rigorous substantiation almost no operator has. Describe what a treatment is and how it is used; be extremely careful about promising what it will do.

---

Do You Need LegitScript Certification to Advertise?

If you want to run ads on the major platforms, in practice yes. Google, Meta, and Microsoft require telehealth and online-pharmacy advertisers to be certified — typically through LegitScript — before serving ads. Without it, your largest paid acquisition channels are effectively closed.

But certification is a gate, not a shield. LegitScript makes the point directly: certification is like getting your driver's license — it qualifies you to be on the road, but it does not mean you can ignore the traffic laws. Certified operators still get individual ads disapproved, and still answer to the FTC and FDA for the claims they make. Certification unlocks the channel; it does not pre-approve your copy.

Because certification gates which channels you can use at all, it also shapes your acquisition economics — we cover that interaction in how certification shapes acquisition cost by category. And the certification process itself is walked through in how LegitScript telehealth certification works.

---

The Compounded-vs-Branded Line You Cannot Cross

Compounded medications are not FDA-approved, and you may not market them as equivalent to, or replacements for, FDA-approved branded drugs. This is one of the brightest lines in telehealth marketing, and one of the most commonly crossed.

Language that implies a compounded product is "the same as" a brand-name drug, or positions it as an interchangeable substitute, falls outside FDA guidance. This came to a head with compounded GLP-1 marketing: in early 2026, the FDA issued a wave of warning letters to telehealth companies over how they marketed compounded semaglutide and tirzepatide, much of it centered on claims that blurred the line between compounded products and the approved brands. You can verify enforcement actions in the FDA's public Warning Letters database.

The rules to internalize:

• Do not call a compounded product by a brand name as if they are the same thing.
• Do not claim or imply FDA approval for a compounded medication.
• Do not position a compounded drug as a cheaper "version of" a branded drug.
• Describe compounded products accurately, for what they are.

The compounded GLP-1 situation is its own regulatory story — we cover it in the compounded GLP-1 FDA restrictions operators must know. The marketing lesson generalizes to every compounded category: accuracy about approval status is non-negotiable.

---

Testimonials, Endorsements, and Before-and-After Imagery

Patient stories and results imagery are among the most persuasive — and most regulated — tools in health marketing. Both the FTC's substantiation rules and its endorsement rules apply, and they are strict.

Testimonials and endorsements:

• A testimonial describing a result implies that result is typical. If it is not typical, you generally must disclose the results a consumer can realistically expect.
• Material connections — payment, free product, affiliation — must be disclosed clearly and conspicuously.
• You are responsible for claims made by endorsers and affiliates, not just claims you make directly.

Before-and-after imagery:

• The FTC has become increasingly aggressive about before-and-after images, especially as AI-generated mock-ups have spread.
• Images must depict genuine, representative, substantiated results — not idealized or fabricated outcomes.
• Many compliance advisers recommend avoiding before-and-afters in ads entirely, because the substantiation burden is high and platforms disapprove them frequently.

The safe posture is conservative: real, typical, disclosed, and substantiated — or not used at all.

---

A Quick-Reference Table of Common Claims

Marketing element	The rule	Safer practice
Outcome claims ("lose X lbs")	Must be substantiated by competent, reliable scientific evidence	Describe the treatment, avoid specific promised outcomes
Compounded vs branded	Cannot imply equivalence or FDA approval	Describe compounded products accurately, by what they are
Testimonials	Must reflect typical results; disclose connections	Use genuine, representative stories with clear disclosures
Before-and-after images	Heavily scrutinized; must be genuine and typical	Avoid in ads, or use only real, substantiated images
AI-written copy	Brand is responsible for the claims	Human review before publishing; disclose AI use where expected

Treat this as a starting filter, not a substitute for counsel. When a claim sits near a line in this table, route it to a compliance professional before it ships.

---

Who Is Responsible for AI-Written Marketing Copy?

You are. Brands are responsible for the health claims in their marketing regardless of whether a human or an AI tool wrote them. As generative tools take over more copywriting, this has become a live compliance risk: an AI can fluently produce an unsubstantiated or misleading health claim that reads perfectly and violates FTC standards completely.

Two obligations follow. First, a human must review AI-generated marketing copy before it publishes — "the model wrote it" is not a defense to a deceptive claim. Second, in a growing number of contexts, disclosing that content was AI-generated is expected, and misrepresenting AI-generated testimonials or imagery as real is its own violation. The safe rule: AI can draft, a qualified human must approve, and every claim still has to clear the same substantiation bar as if a person wrote it by hand.

---

Building Marketing Compliance Into Operations

Marketing compliance is not a one-time review; it is an operational discipline. The operators who avoid trouble build it into how they work.

1. Substantiate before you publish. Keep a file of the evidence behind every objective claim. If you cannot point to the support, cut the claim.
2. Get and maintain certification. LegitScript certification gates your channels; keep it current and treat it as table stakes, not a finish line.
3. Police compounded language. Audit every page and ad for anything implying brand equivalence or FDA approval of a compounded product.
4. Control testimonials and imagery. Approve them centrally, disclose connections, and keep results representative.
5. Gate AI copy through human review. No AI-written claim reaches the public without a qualified person signing off.
6. Keep records. Marketing compliance, like clinical compliance, is provable only if you documented it. The broader recordkeeping discipline is in the compliance requirements every operator carries and the compliance basics of selling prescriptions online.

The thread connecting all of it is the same one that runs through good clinical operations: say only what is true, prove what you say, and keep the record. An operator who owns their data and their workflow is in a far stronger position to enforce that discipline than one whose marketing, patients, and records are scattered across systems they do not control.

---

Key Takeaways

• The FTC requires health claims to be truthful, not misleading, and substantiated by competent and reliable scientific evidence.
• LegitScript certification is required by Google, Meta, and Microsoft to advertise telehealth — but it does not exempt you from the underlying advertising laws.
• Compounded medications may not be marketed as equivalent to, or replacements for, FDA-approved branded drugs; the FDA enforced this against telehealth companies over compounded GLP-1 marketing.
• Testimonials must reflect typical results or disclose that they do not, and material connections must be disclosed clearly and conspicuously.
• Before-and-after imagery draws heightened FTC scrutiny, especially AI-generated or non-representative images.
• You are responsible for claims made by AI-generated marketing copy — a human must review it before it publishes.

---

Frequently Asked Questions

What does the FTC require for telehealth advertising?

The FTC requires that health-related claims be truthful, not misleading, and substantiated before they are made. Its Health Products Compliance Guidance calls for "competent and reliable scientific evidence" — generally well-conducted human studies — to support objective claims about a product's benefits, safety, or efficacy. That standard applies to your website, ads, emails, and social content. Claims you cannot substantiate at that level should not be made.

Do I need LegitScript certification to advertise a telehealth clinic?

In practice, yes, if you want to advertise on major platforms. Google, Meta, and Microsoft require telehealth and online-pharmacy advertisers to be certified — typically through LegitScript — before running ads. But certification is a gate to the channels, not a license to ignore the law. As LegitScript itself puts it, certification is like a driver's license: it qualifies you to be on the road, but you still have to follow the traffic laws.

Can I market compounded medications as the same as brand-name drugs?

No. Compounded medications are not FDA-approved and may not be marketed as equivalent to, or replacements for, FDA-approved branded drugs. Language that implies equivalency, or compares a compounded product to a brand name as if they were interchangeable, falls outside FDA guidance. The FDA acted against telehealth companies over exactly this in compounded GLP-1 marketing. Describe compounded products accurately and avoid implying brand equivalence.

Are before-and-after photos allowed in telehealth ads?

They are heavily scrutinized and risky. The FTC has grown increasingly aggressive about before-and-after imagery, particularly as AI-generated mock-ups have proliferated. Images must represent typical, substantiated results, not idealized or fabricated outcomes. Many compliance advisers recommend avoiding before-and-afters in ads altogether. If you use them, they must be genuine, representative, and substantiated — and even then, the platform may still disapprove them.

Am I responsible for marketing claims my AI tools write?

Yes. Brands are responsible for the health claims in their marketing regardless of whether a person or an AI tool wrote them. AI-generated copy can produce unsubstantiated or misleading claims that violate FTC standards, and "the AI wrote it" is not a defense. A human must review AI-written marketing copy before it publishes, and in many contexts disclosure that AI was used is expected.

---

neolife keeps you as the system of record for your patients, orders, and provider approvals — the documentation backbone that makes marketing and clinical compliance provable rather than assumed. If you want infrastructure that keeps your records audit-ready while you scale acquisition, talk to us. This post is educational and not legal advice; consult qualified advertising and healthcare counsel before publishing marketing claims.