Notes

LegitScript Certification: What It Is, Who Needs It, and What It Costs

LegitScript is a private company that certifies healthcare businesses in high-risk categories. Google, Microsoft and Meta rely on its certification before they allow ads from online pharmacies, telehealth services that prescribe, and US addiction treatment providers. Most clinics, including dental, plastic surgery, dermatology and fertility, do not need it.

"Do we need LegitScript?" comes up in almost every healthcare onboarding call I take. Usually a disapproval email mentioned certification and the owner assumed it applies to everyone in medicine. It does not. Applying when you do not need it wastes months and fees. Not applying when you do keeps your ads off indefinitely. Here is the map.

Disclosure: I do not take addiction treatment or behavioral health clients at the moment because of an exclusivity agreement. For that category this article is a map and not a pitch.

What is LegitScript certification?

LegitScript certification is a review of a healthcare business by an independent company, LegitScript, confirming that it is licensed, operates legally and describes itself accurately online. Advertising platforms and payment processors use the result as proof that someone qualified has checked. It lasts one year and is renewed annually, with monitoring in between.

Two programs matter for advertisers. Healthcare Merchant Certification covers pharmacies and telemedicine. Addiction Treatment Certification covers drug and alcohol treatment providers, and LegitScript states on that page that it is recognized by Google, Microsoft and Meta.

The important word is business. The reviewer reads your licenses, your ownership records, your policies and your website. Your ad copy is not part of it. That is Google's job, later.

Who Google actually requires it from

Google's healthcare and medicines policy names the categories where third-party certification is a precondition: online pharmacies, telemedicine services that prescribe, and addiction services in the United States. In these categories the check happens at the account and business level. No amount of ad copy editing will get you approved without the certificate.

One group is caught by surprise more and more: aesthetic and weight-loss practices that started prescribing at a distance. A med spa that treats people in person is an ordinary advertiser. LegitScript's own certification FAQ draws the line clearly: taking payments for consultations, appointments or deposits does not make a med spa eligible, while processing online payments for prescription medications does. So the same med spa selling prescription weight-loss medication through online consultations has become a prescribing telehealth service. If that is you, check the wording against your model before your next campaign, not after the suspension.

Who does not need it, which is most clinics

Dental practices, plastic surgeons, in-person med spas, dermatology, IVF and fertility clinics, orthopedics, LASIK, chiropractic and physical therapy do not need LegitScript to advertise.

When their ads are disapproved, the causes are ordinary: outcome promises in copy, before-and-after imagery on the landing page, prescription drug brand names on the site, or the limits in Google's personalized advertising policy for sensitive health categories. Those are fixed by changing the site and the ads. A certification fee would not have helped. I cover the usual suspects in getting cosmetic surgery ads approved and the site side in what a healthcare website needs before Google Ads will run.

What LegitScript certification costs in 2026

Prices are set by LegitScript and change. The figures below were taken from LegitScript's own healthcare certification and addiction treatment certification pages on 19 September 2026. Confirm them there before you budget.

Three things owners miss when they budget.

The application fee is gone whether or not you are approved. So the cheapest application is the one that does not stall.

The annual fee is due only once you are approved, and it recurs. A group with six facilities is budgeting six annual fees.

The fees are the small part. The larger cost is internal: gathering licenses for every location and clinician, fixing mismatched entity names, rewriting pages that promise outcomes, and, for many, a legal review of financial and referral arrangements. If left alone, the cost is simpler to state. In a category where certification is required, there is no paid search at all, so every competitor who is certified takes those searches.

How the process works, and the second gate

1. You apply on LegitScript's site and pay the application fee.
2. You submit licensure, ownership and operational documentation, and answer follow-up questions.
3. LegitScript reviews the business and the website. It does not publish a guaranteed timeline. In my experience it runs from weeks to a couple of months, and completeness of documentation decides which.
4. On approval you pay the annual fee and monitoring begins.
5. You then apply to Google for its own certification so the LegitScript approval is linked to your Google Ads account. Microsoft and Meta have their own forms too.

Step five is the one people forget. They receive the LegitScript email, celebrate, and wait. Nothing changes, because Google has not been told. Addiction services advertisers in particular must complete Google's certification as well as LegitScript's.

What to fix before you apply

The review reads your website, so the website is where applications stall.

• Make license numbers findable and current, for the facility and for clinicians where your state expects it.
• Use one legal entity name everywhere: site footer, licenses, Google Ads billing, payment processor.
• Remove claims your documentation cannot support. Success rates, guarantees and "best" language are the usual ones.
• State pricing, insurance and refund policies plainly.
• Make the physical address match the licensed address. Suite numbers count.
• Check every domain you own. Forgotten microsites with old claims are reviewed too.

Applications stall on mismatches more than on substance. The reviewer cannot approve what they cannot verify.

Apply yourself, get help, or skip paid search

An honest note on agencies: if an agency already handles your compliance paperwork well, this is not a reason to leave it. The preparation is mostly administrative. What matters is that whoever does it also understands what Google will check afterwards.

What still gets you disapproved after certification

The certificate opens the category. It does not exempt your ads from every other policy. Certified accounts still get disapprovals for outcome claims, restricted drug terms in keywords and copy, and landing page problems. Treat certification as the entry ticket and ordinary policy hygiene as the ongoing work. I describe that ongoing work in advertising inside a regulated healthcare category.

I run Google Ads for a luxury US healthcare clinic in one of the most restricted ad categories that exists, so policy work is part of my week. It is also where the one result I quote comes from: I inherited an underperforming account and rebuilt it; cost per acquisition came down by about 78% while spend grew. The case write-up is here.

Not sure whether certification is your actual problem? Send me the disapproval notice before you spend anything. I will tell you whether it is a certification case, a remediation case, or something that cannot be fixed, and I will tell you straight. That diagnosis is part of my ad policy and approvals work. The audit is $500 per ad account, comes with a 90-day plan, and is credited toward the first month if you continue with me. You work with me directly. Book a call or write first.

Read the policy named in the email first

One line in a disapproval email decides whether you are facing a few days of site changes or a few months of certification. Read it before you pay an application fee that cannot be refunded. If it names pharmacy, prescribing or addiction services, start gathering licenses today and remember the second gate at Google. If it names anything else, certification is not your problem. If you want it read by someone who does this weekly, send it over.

Written by Lev Brovtsev, independent performance marketing consultant. I do the work myself. Last updated: September 2026.