Marketing Rules & Restrictions
Bottom line for this section
The compliant marketing playbook is unambiguous: advertise the consultation, condition, and patient experience — never the specific peptide by name or 'sameness' claim — under LegitScript Healthcare Merchant Certification on Meta and Google, with no paid TikTok or X (effectively closed), no patient testimonials in New York under §6530(27), no before/after photos without §651 / Rule 164.3-compliant disclosures, and a per-ad-creative gate that the marketing team runs before publishing.
Research
Marketing for a US telehealth compounded-peptide business sits at the intersection of FDA misbranding enforcement under FDCA §502(a) and §502(bb), FTC Section 5 deceptive-advertising authority under the December 2022 Health Products Compliance Guidance, strict state medical-board advertising rules (CA B&P §651, TX Med Bd Rule 164, FL 64B8-11.001, NY Ed §6530(27)), HIPAA marketing-authorization at 45 CFR §164.508(a)(3), the 2023-revised FTC Endorsement Guides at 16 CFR Part 255, and platform-specific gates from Meta, Google, TikTok, and X — most paid healthcare placements require LegitScript Healthcare Merchant Certification. The Supreme Court struck down the original §503A advertising prohibition in Thompson v. Western States Medical Center (2002), and FDA's current legal hook is §502(bb) misbranding, deployed in two visible waves: more than 50 warning letters on September 9, 2025 and 30 more on March 3, 2026, all targeting telehealth GLP-1 sellers for claims that compounded products contain the 'same active ingredient' as Ozempic/Wegovy/Mounjaro/Zepbound or are 'generic versions.' The FTC obtained a $150,000 final order against NextMed on December 3, 2025 for unsubstantiated claims, fake testimonials, distorted reviews, and undisclosed subscription costs.
Key facts
FDA's legal hook for compounded-drug advertising enforcement is FDCA §502(a) and §502(bb) (21 U.S.C. §352(a) and (bb)), which make a drug misbranded if its labeling or advertising is 'false or misleading in any particular' — the Supreme Court struck down the §503A advertising prohibition itself in Thompson v. Western States Medical Center, 535 U.S. 357 (2002) as an impermissible restriction on commercial speech.
On September 9, 2025, FDA and HHS publicly announced a broad enforcement initiative against telehealth compounded-drug advertising, with 'thousands of letters' warning pharmaceutical companies plus approximately 100 cease-and-desist letters and more than 50 formal warning letters — named recipients included Expert Aesthetics, The HCG Institute, Bioverse Inc., Elevate Your Wellness LLC, GLP-1 Solution, Tuyo Health Inc., Healthon Inc., SemaBio, Vitals RX, Fancy Meds, DirectMeds, JulyMD, Slendid, Try Nova, and eDrugstore.
FDA's September 2025 letters cited specific claims as misbranding: 'Weekly injectable GLP-1 with the same active ingredient as Ozempic and Wegovy,' 'Same active ingredient as Zepbound and Mounjaro,' 'generic versions,' 'clinically proven ingredients,' and 'With compounded semaglutide, you get the same trusted active ingredient as in brand-name medications.'
On March 3, 2026 FDA issued a second wave of 30 warning letters to telehealth companies for the same category of violations, identifying four flagged patterns: (1) implying compounded GLP-1 products are the same as FDA-approved versions, (2) suggesting equivalence to approved branded drugs, (3) obscuring product sourcing, and (4) advertising compounded products under telehealth-company brand names in ways that imply the telehealth firm itself is the compounder.
Eli Lilly filed four federal lawsuits in April 2025 against telehealth companies Fella Health, Willow Health, Henry Meds, and Mochi Health, alleging deceptive trade practices, false advertising, and unlawful corporate practice of medicine — specifically that defendants 'falsely advertise personalized options of tirzepatide drugs… when, in actuality, they are selling a standard, mass-produced compounded tirzepatide drug.'
Novo Nordisk sued Hims & Hers on February 9, 2026 for patent infringement over compounded semaglutide marketing; the case was voluntarily dismissed without prejudice as part of a March 2026 collaboration under which Hims & Hers agreed to offer Novo's branded Ozempic and Wegovy and cease advertising compounded GLP-1 'except where medically necessary' — Hims's Super Bowl GLP-1 ad parody was specifically flagged by FDA Commissioner Marty Makary in September 2025.
The FTC's December 2022 Health Products Compliance Guidance requires 'competent and reliable scientific evidence' for any health-related claim, generally meaning 'randomized, controlled human clinical testing' — animal/in vitro studies cannot substantiate human-effect claims, surveys cannot substantiate, and post-hoc 'p-hacking' analysis is rejected.
The FTC obtained a final order against telehealth weight-loss provider NextMed on December 3, 2025 (FTC v. NextMed; Robert Epstein and Frank Leonardo named individually), with $150,000 in monetary relief, for unsubstantiated weight-loss claims, fake testimonials, distorted consumer reviews, undisclosed costs ($138-188/month subscription that did not include the GLP-1 drug or required labs), and failure to obtain express informed consent before recurring debits.
The 2023-revised FTC Endorsement Guides (16 CFR Part 255, published July 26, 2023) expanded the definition of 'endorsement' to cover likeness depictions, tags, mentions, and 'no-comment' situations; tightened the 'clear and conspicuous' disclosure standard to require unavoidable disclosure in the same medium (visual + audible for video); and confirmed that consumer endorsements 'themselves are not competent and reliable scientific evidence' and disclaimers like 'results not typical' do not cure deception.
Meta's 2026 ad policy prohibits prescription-drug ads unless the advertiser is LegitScript-certified or has cleared Meta's internal review, only permits targeting to US/Canada/New Zealand audiences over 18, and 35 state attorneys general have pressured Meta on misleading weight-loss-drug ads.
Google Ads Healthcare & Medicines policy requires online pharmacies and telemedicine providers to hold LegitScript Healthcare Merchant Certification before targeting prescription-drug terms, restricts prescription-drug services advertising to US/Canada/New Zealand/Australia/India, and continues to prohibit promotion of unapproved pharmaceuticals; October 2025 update permits prescription-drug terms in ad text only in 'limited, non-promotional contexts.'
TikTok's healthcare and pharmaceuticals policy prohibits ads for prescription medications, online pharmacies, telehealth providers, therapy/mental-health consulting, etc. — making TikTok effectively closed for paid promotion of compounded peptide products.
X (Twitter) restricts the promotion of health and pharmaceutical products under its Healthcare Ads Policy and additionally prohibits the creation of custom audiences or conversion events based on sensitive health information; combined restriction makes X a difficult paid channel for compounded-peptide telehealth.
FDA's current statutory authority for compounded-drug advertising enforcement is the 2013 amendment to FDCA (codified at §502(bb), 21 U.S.C. §352(bb)). Bipartisan legislation S. 652 (Protecting Patients from Deceptive Drug Ads Act, Sens. Durbin/Marshall, February 2025) would expressly extend FDA jurisdiction over social-media influencers and telehealth companies.
California Business and Professions Code §651 makes it a misdemeanor for any licensed health professional to disseminate advertising likely 'to create false or unjustified expectations of favorable results,' including any photograph 'that does not accurately depict the results of the procedure being advertised' or that has been altered; use of a model photo without 'prominent location in easily readable type' disclosing model status is a violation.
Texas Medical Board Rule 164.3 (22 TAC §164.3) prohibits any advertisement 'in any way false, deceptive, or misleading' including testimonials with false statements or without disclaimers; photos of models or actors must be 'explicitly identified as models and not actual patients'; advertising that 'makes a representation likely to create an unjustified expectation about the results' is barred.
Florida Administrative Code 64B8-11.001 prohibits any advertisement 'in any way false, deceptive, or misleading,' including misrepresentation, partial disclosure creating false expectations, undelivered services, fees that don't represent actual charges — and requires the licensee's name to be 'clearly identif[ied] … as either a medical doctor (M.D.), physician assistant (P.A.), or anesthesiologist assistant (A.A.).'
New York Education Law §6530(27) defines professional misconduct as 'advertising or soliciting for patronage that is not in the public interest,' including any advertising that is 'false, fraudulent, deceptive, misleading, sensational, or flamboyant' or makes claims of 'professional superiority' the licensee cannot substantiate; testimonials in physician marketing materials are STRICTLY prohibited in New York even with patient consent and anonymity; licensees must maintain exact copy of each advertisement for one year.
HIPAA at 45 CFR §164.508(a)(3) requires a HIPAA-compliant written patient authorization before any use or disclosure of PHI for marketing, with limited exceptions only for face-to-face communications by the covered entity and 'promotional gift[s] of nominal value'; if marketing involves direct or indirect financial remuneration from a third party, the authorization must explicitly state so.
LegitScript Healthcare Merchant Certification (the de facto gatekeeper for Google, Meta, Microsoft, TikTok paid healthcare advertising) evaluates applicants against 9 standards; non-refundable application fee plus annual certification fee per website; ongoing monitoring continues after initial certification.
FDA placed BPC-157, TB-500 (Thymosin Beta-4 Fragment), and certain other peptides into Category 2 of the interim 503A bulks list on September 29, 2023, meaning FDA's official position is 'do not compound'; ipamorelin acetate was removed from Category 2 on September 27, 2024; FDA scheduled PCAC reconsideration July 23-24, 2026 — making any specific peptide-product marketing for these substances a heightened enforcement-trigger.
The compliant marketing posture for compounded peptide telehealth is to advertise the consultation, the condition category, and the patient experience — not the specific peptide or 'sameness' claim — with copy like 'personalized wellness programs for men over 40' clearing platform review while 'Buy sermorelin online' does not; advertising claiming compounded products are 'the same as' branded FDA-approved drugs has been specifically identified by FDA as misbranding.
Tradeoffs
Marketing creative line: product-named vs category/consultation framing
Name the peptide / compare to brand
Pro: Higher click-through and conversion when patients search for known molecules; Clear value prop vs brand pricing; Resonates with educated audiences
Con: Directly maps to FDA's flagged misbranding claims in Sept 2025 + March 2026 letters; Triggers state medical-board enforcement under CA §651 / TX 164.3 / FL 64B8; Will fail LegitScript review and lock out of Meta/Google paid ads; Creates Lanham Act + patent-infringement litigation exposure
Consultation, condition, patient experience only
Pro: Survives LegitScript and platform review; Aligns with what FDA appears willing to tolerate; State medical-board defensible — no specific outcome guarantees; Lowers Lanham Act exposure
Con: Lower intent, higher CAC; Hard to differentiate vs competitors at category level; Sales funnel must do more educational work post-click
Use of patient testimonials and before/after photos
Real-patient testimonials with HIPAA authorizations + atypical-results disclosures
Pro: Strongest social proof if executed cleanly; Permitted in most states (CA, TX, FL) with overlays
Con: STRICTLY prohibited in New York under §6530(27) regardless of consent; 'Results not typical' disclaimers don't cure deception under 2023 FTC Guides — must disclose generally-expected outcome; Requires per-patient HIPAA §164.508(a)(3) authorization with revocation rights and remuneration disclosure; CA §651 misdemeanor exposure if photos altered or don't accurately depict procedure results; Must retain ad copy for 1+ year (NY)
Avoid testimonials; use clinician credentials, educational content, peer-reviewed citations
Pro: Lower compliance overhead and predictable risk; Works nationally — including NY; Reduces FTC Endorsement Guide and platform exposure
Con: Lower conversion compared to testimonial-heavy creative; Brand-building takes longer; perceived as less differentiated
Influencer / affiliate marketing structure
Direct paid influencer deals with #ad disclosure and substantiation files
Pro: Scales reach quickly; Aligns with FTC Endorsement Guide framework
Con: Brand is jointly liable for influencer claims; Every post must be substantiated separately; can't outsource substantiation duty; Health-claim influencer posts attract FTC scrutiny — 2023 Guides expanded liability to 'no-comment' silence; State medical boards (NY, FL, TX, CA) treat influencer claims as physician advertising if clinician implied
No influencers; owned content + paid search (LegitScript) + earned media
Pro: Removes brand-side liability for third-party endorsement violations; More predictable cost structure; Easier to scale FTC substantiation rigorously
Con: Loses trust-multiplier effect of third-party voices; Owned-content SEO is slow and expensive at scale; Competitors using influencers — channel gap
"The compliant marketing playbook is unambiguous: advertise the consultation, condition, and patient experience — never the specific peptide by name or 'sameness' claim — under LegitScript Healthcare Merchant Certification on Meta and Google, with no paid TikTok or X (effectively closed), no patient testimonials in New York under §6530(27), no before/after photos without §651 / Rule 164.3-compliant disclosures, and a per-ad-creative gate that the marketing team runs before publishing."
Recommendation
Hold LegitScript Healthcare Merchant Certification before ANY paid placement on Meta, Google, or Microsoft (also gates payment-processor underwriting per §4). Frame all creative around the consultation experience and condition category — NEVER 'same active ingredient,' 'generic version,' 'clinically proven,' or 'FDA-approved' language; the September 2025 + March 2026 warning letters cite verbatim phrasings that must not appear. Skip TikTok and X paid entirely. If using testimonials, route through HIPAA §164.508(a)(3) authorization templates with revocation rights and remuneration disclosure, applying the strictest state's rule (NY §6530(27)'s testimonial prohibition) as default national policy. Run every ad through the per-ad-creative compliance gate widget below before publish. Engage FTC-specialist counsel (Cooley, Alston & Bird, Arnold & Porter) for a six-month review of the substantiation file and influencer agreements. For a §10 Tier 1 launch menu (NAD+ injectable + topical GHK-Cu) — neither of which is a compounded GLP-1 — the dominant marketing risk shifts from FDA misbranding ('same active ingredient as Ozempic') to FTC anti-aging / wellness-claim substantiation under the December 2022 Health Products Compliance Guidance: the per-ad-creative compliance gate must add explicit FTC substantiation review for NAD+ longevity / cellular-energy claims and GHK-Cu topical hair-growth / skin-rejuvenation claims, both of which require 'competent and reliable scientific evidence' (typically randomized controlled human clinical testing) per FTC Section 5 plus the NextMed $150K Dec 3 2025 final-order template.
Steel-manned counter
The strongest counter: Hims, Ro, Mochi, and Henry Meds have grown to massive scale precisely by walking up to the line of FDA's misbranding interpretation — Mochi's MSO/PC documented patient-specific framing for compounded tirzepatide with B12 combination is itself an aggressive marketing posture that has survived (so far) the Eli Lilly suit and the FDA wave. A founder with sophisticated legal review per creative could potentially capture market share via slightly more aggressive framing than the consultation-only baseline, accepting that the Hims-style DOJ referral is a tail risk priced into the growth strategy. The failed-operator side: NextMed paid $150K under FTC's December 2025 final order for substantially the playbook this counterfactual founder would attempt.
| State | Testimonial rule | Model/photo disclosure | Outcome-guarantee prohibition | Telehealth add-ons | Record retention | Statutory cite |
|---|---|---|---|---|---|---|
| California | Permitted; must not suggest guaranteed outcomes; must not mislead by omission | Photo must accurately depict result and not be altered; model photos require prominent easily-readable disclosure | Yes — no 'false or unjustified expectations of favorable results' | General medical-advertising rules apply; misdemeanor exposure | Not specified in §651 | CA B&P Code §651 |
| Texas | Permitted under rule with disclaimers about attester credentials; Occupations Code retains absolute-prohibition framing — high risk | Models and actors must be explicitly identified as not actual patients | Yes — no representation likely to create unjustified expectation; no permanent-cure claims for incurable diseases | Telemedicine rules (Ch. 174) separate; advertising rule (Ch. 164) applies broadly | Not specified in 164.3 | 22 TAC §164.3 (TX Med Bd Rule 164) |
| Florida | Not addressed in 64B8-11.001 directly; falls under general 'misleading' prohibition | Not explicitly addressed | Yes — no false expectations; no claims physician does not expect to perform | Separate Florida telehealth registration; advertising rule still applies | Not specified | Fla. Admin. Code R. 64B8-11.001 |
| New York | STRICTLY PROHIBITED — even with patient consent and anonymity (per Section 27 interpretation) | Not specifically addressed; falls under general 'false, fraudulent, deceptive, misleading, sensational, or flamboyant' | Yes — no unsubstantiated claims of professional superiority or service results | Telehealth practice rules separate; advertising rule applies to all licensees | 1 year after last appearance — copies of every ad/transcript/video must be retained | NY Education Law §6530(27) |
| New Jersey | Permitted with restrictions per NJSA 45:9-22.5 | General misleading-advertising prohibition | Yes — under general professional-conduct rules | NJ telemedicine registration separate | Not surfaced in primary search | NJSA 45:9-22.5 / NJ Med Bd general advertising rules |
Run every paid ad, organic post, influencer brief, and landing-page change through this gate before publish. Failing any item is a publish-block.
- Substantiation file built and dated: 'competent and reliable scientific evidence' per FTC Dec 2022 Guidance — for every benefit/outcome/safety claim
- No 'same active ingredient as Ozempic/Wegovy/Mounjaro/Zepbound' or 'generic version' language — specific phrasing FDA cited in 50+ Sept 2025 and 30 March 2026 letters
- No 'FDA-approved' or 'clinically proven' or 'tested in clinical trials' claims about the compounded product
- No implication that the telehealth company is itself the compounder — disclose partner pharmacy clearly
- Ad copy advertises consultation, condition category, or patient experience — not specific peptide by name in sales context
- If testimonials used: signed patient HIPAA authorization per 45 CFR §164.508(a)(3) on file with revocation rights + third-party remuneration disclosed
- If testimonials used: 'results not typical' alone is NOT sufficient — disclose generally-expected outcome per 16 CFR §255.2 (2023)
- If testimonials used: NOT running in New York (§6530(27) prohibits even with consent and anonymity)
- If before/after photos: photo accurately depicts actual patient's result, not altered, model status disclosed in 'prominent location in easily readable type' per CA §651
- If before/after photos: model/actor explicitly identified as not an actual patient per TX 22 TAC §164.3
- If influencer/affiliate: 'material connection' disclosure 'clear and conspicuous' in same medium per 16 CFR §255.5; #ad on screen and audible for video
- If influencer/affiliate: brand maintains substantiation for every claim — joint liability per 2023 FTC Guides
- Physician name + MD credential displayed if any clinician is implied (CA, TX, FL, NY all require)
- LegitScript Healthcare Merchant Certification active before any paid Meta, Google, or Microsoft placement
- TikTok paid: do not run prescription-product ads — TikTok prohibits online pharmacies and telehealth providers as paid categories
- X (Twitter) paid: confirm any health/pharma promotion pre-cleared with X policy team; no custom audiences on sensitive health information
- Strictest-state disclaimer rule applied to any ad that runs nationally (default to NY's no-testimonial rule)
- Ad copy archived for 1 year after last appearance (NY requirement; safe nationally)
- No bonuses/inducements other than discount or reduction in established fee (NY §6530(27))
- All recurring-billing disclosures comply with FTC Section 5 / NextMed playbook: total cost (drug + labs + consults) clearly disclosed pre-purchase, express informed consent for recurring debits, refund/cancellation processed timely
- Subscription-cost claims do NOT use fake testimonials, manipulated reviews, or undisclosed-cost framing — NextMed FTC $150K final order (Dec 3 2025) is the template
| Feature | Meta (Facebook/Instagram) | Google Search/Display | TikTok | X (Twitter) | YouTube (Google) | Podcasts (host-read) | Influencer/affiliate | Owned-content SEO | Email to opted-in list |
|---|---|---|---|---|---|---|---|---|---|
| Compounded telehealth permitted? | Yes with LegitScript + Meta cert (consultation framing only) | Yes with LegitScript + Google healthcare cert (consultation framing only) | No — TikTok prohibits online pharmacies and telehealth providers entirely | Restricted — health & pharmaceutical promotion limited; no LegitScript-equivalent | Limited — same Google Healthcare rules; demonetization risk on organic | Yes — no platform gate; host's agency may decline; FTC #ad required | Yes — but brand jointly liable; substantiation per claim | Yes — no platform gate; still subject to FDA misbranding and state board | Yes — but HIPAA marketing rule may apply if list is patient-derived |
| Certification required? | LegitScript Healthcare + Meta onboarding | LegitScript Healthcare + Google healthcare cert | N/A (prohibited) | No published LegitScript path; case-by-case | Same as Google | None platform-side; FTC + FDA still apply | None platform-side; agency may require compliance review | None | None platform-side; HIPAA + CAN-SPAM apply |
| Ban-risk severity if non-compliant | High — account suspension; lifetime ban possible | High — account suspension | N/A | Medium — less aggressive than Meta/Google but violations trigger removal | High — channel demonetization + Google Ads risk | Medium — host may be sued; less platform-side enforcement | Medium — joint liability; FTC enforcement (NextMed precedent) | Low platform-side; High FDA/state-board if misbranding | Low platform-side; High HIPAA/FTC if non-compliant |
| Substantiation overhead | High — every claim must clear LegitScript and Meta review | High — same | N/A | Medium — less formalized review | High | Medium — host scripts reviewable in advance | High — each post per influencer must be substantiated | Medium — claims live longer | Medium — depends on segmentation/PHI use |
| Realistic CAC posture (telehealth peptide 2026) | Restricted — narrow targeting + consultation-only inflates CAC | Restricted but workable — high-intent search most efficient for compliant operators | Closed channel for paid (organic possible but not a sales funnel) | Niche — smaller audience + restricted targeting | Restricted; pre-roll on health content viable | Open but expensive at premium-host tier; strong trust transfer | Open; carries brand-liability tail and audit overhead | Lowest variable CAC at steady state but slow to build | Lowest CAC for existing-customer cohorts; not top-of-funnel |
Open questions
Things this report could not resolve. Send these to your specific advisor.
What is the exact text of FDCA §201(n) as it applies (or doesn't) to telehealth seller intermediaries who are neither the compounder nor the prescribing physician?
Email this question to your lawyerDoes the patient-specific Rx requirement of §503A practically constrain category-level GLP-1 advertising given Thompson v. Western States struck down the §503A advertising prohibition?
Email this question to your lawyerWhat is the precise LegitScript certification cost, timeline, and rejection rate for a new-entrant compounded-peptide telehealth applicant?
Email this question to your lawyerAre there state-specific telehealth-advertising rules (beyond general medical-board) in CA/TX/FL/NY that add testimonial, before-after-photo, or disclaimer requirements specific to telemedicine?
Email this question to your lawyerWhat is the FTC's appetite to follow NextMed with enforcement against telehealth peptide brands?
Email this question to your lawyer