Compounded Medications in Telehealth: The FDA Rules That Actually Matter

Last month, I talked to a telehealth founder who had to shut down his entire weight loss brand after 8 months of operation. He'd done everything right — hired a great medical director, built a beautiful website, acquired patients through Instagram. What he didn't do was understand how the FDA views compounded medications.

Three warning letters later, his payment processor froze his accounts, his advertising platforms banned his ads, and he was facing a potential injunction. All because nobody explained the difference between 503A and 503B compounding pharmacies in plain English.

If you're building a D2C telehealth brand that involves compounded medications — especially GLP-1s like semaglutide or tirzepatide — this guide is for you. I'm going to break down what the FDA actually requires, what the states control, and how to build a compliant operation without needing a law degree.

What Are Compounded Medications, Anyway?

Let's start with the basics, because here's where most founders get confused.

Compounded medications are custom-made drugs that are mixed or altered for a specific patient. They're different from FDA-approved commercial drugs that come pre-made in standard dosages.

In telehealth, you'll encounter compounding most often in these scenarios:

• Weight loss medications: Semaglutide and tirzepatide are in shortage, so pharmacies compound versions of these
• Custom dosage combinations: A patient needs a specific strength that doesn't exist commercially
• Alternative formulations: Converting a pill to a liquid for patients who can't swallow pills
• Allergy accommodations: Removing inactive ingredients a patient is allergic to

Here's the critical thing to understand: the FDA does NOT pre-approve compounded medications for safety and efficacy. That's a big deal. When you prescribe a commercial drug like Ozempic, the FDA has already evaluated it. When you prescribe a compounded version, the pharmacy is responsible for ensuring it's safe and properly made.

503A vs 503B: The Difference That Costs Founders Millions

This is the most important distinction in compounded medications, and it's where telehealth founders get into the most trouble.

503A Pharmacies: The Traditional Model

A 503A pharmacy compounds medications based on an individual prescription for a specific patient. Think of it like a custom tailor — they make one outfit (medication) for one person (patient) at a time.

Key characteristics:

• Must receive a valid patient-specific prescription before compounding
• Can compound for individual patients only
• Subject to state pharmacy board oversight
• Cannot compound in bulk ahead of time
• Must follow USP <797> compounding standards

For most D2C telehealth brands, you'll work with 503A pharmacies. When a patient completes their consultation and gets a prescription, that prescription goes to a 503A pharmacy which then compounds the medication for that specific patient.

503B Pharmacies: The Outsourcing Facility

A 503B pharmacy (also called an outsourcing facility) is different. These pharmacies can compound medications in bulk without patient-specific prescriptions. They're essentially manufacturing medications, just without FDA approval.

Key characteristics:

• Can compound without individual prescriptions
• Must register with the FDA as an outsourcing facility
• Subject to FDA inspections (not just state boards)
• Must follow cGMP (current good manufacturing practice) standards
• Can supply to hospitals and clinics for office use

Most telehealth brands won't work directly with 503B pharmacies for patient prescriptions, but you might encounter them if you're sourcing ingredients or working with certain pharmacy partners.

The FDA's Position on Compounded GLP-1s

This is where things get interesting for weight loss telehealth brands.

In 2022, the FDA added semaglutide and tirzepatide to its drug shortage list. This is significant because when a drug is on the shortage list, the FDA's enforcement priorities shift.

Here's what the FDA allows:

Compounding is permitted when:

• The drug is on the FDA's shortage list
• The compounded version contains the same active ingredient
• The pharmacy follows appropriate compounding standards
• It's for an individual patient with a valid prescription (for 503A)

What the FDA scrutinizes:

• Marketing that suggests compounded versions are "generic" or equivalent to brand-name drugs
• Claims that bypass proper medical screening
• Pharmacies that compound in bulk despite lacking 503B registration
• Quality control issues at compounding pharmacies

The FDA has issued multiple warning letters to telehealth companies and compounding pharmacies over the past two years. Most violations involve:

1. Improper marketing: Claiming compounded semaglutide is "Ozempic" or "Wegovy"
2. Quality failures: Contamination or potency issues at compounding pharmacies
3. Regulatory evasion: Operating as a 503A but effectively functioning as a 503B

State-by-State: What You Actually Need to Know

Here's where the complexity multiplies. The FDA sets the federal framework, but states regulate the practice of medicine and pharmacy.

What this means for your telehealth brand:

States control:

• Provider licensing and scope of practice
• Telehealth-specific regulations
• Pharmacy licensing and inspection
• Prescribing authority for different provider types

The federal government controls:

• FDA drug approval and enforcement
• Drug scheduling (controlled substances)
• Interstate commerce rules

For most telehealth brands, this means you need to understand two things:

1. Where your providers are licensed — They must be licensed in the state where the patient is located at the time of the consultation
2. Where the pharmacy can dispense — The pharmacy must be licensed to ship to the patient's state

This is why working with a platform like Rimo Health that has provider networks in all 50 states and pre-integrates with pharmacies that can ship nationally is so valuable. Managing 50-state compliance manually is a nightmare that most founders underestimate.

The LegitScript Certification Question

If you plan to advertise your telehealth brand — and you should, because patient acquisition is the lifeblood of any D2C telehealth business — you'll encounter LegitScript.

LegitScript is a certification program that verifies healthcare businesses comply with applicable laws and regulations. It's not required by law, but it's essentially mandatory if you want to advertise on major platforms.

Why LegitScript matters:

• Google requires LegitScript certification for healthcare advertisers
• Meta (Facebook/Instagram) requires it for health-related ads
• Other advertising platforms have similar requirements
• It signals to patients and partners that you're a legitimate operation

What LegitScript evaluates:

• Provider licensing and credentialing
• Prescription policies and procedures
• Pharmacy relationships and compliance
• Privacy and security practices (HIPAA)
• Marketing and advertising practices

For compounded medications specifically, LegitScript will examine:

• Your pharmacy partners' licensing and compliance history
• Whether you're working with 503A or 503B pharmacies
• Your patient screening and intake processes
• How you handle medication shortages

Getting LegitScript certified is not trivial, but it's manageable if you've built your operations correctly from the start.

Building a Compliant Operation

Now for the practical part. How do you actually build a telehealth brand that sells compounded medications without running afoul of the FDA?

Choose Your Pharmacy Partners Wisely

Your pharmacy relationships are the foundation of compliance. Due your due diligence:

• Verify they hold appropriate state licenses
• Confirm they're in good standing with their state board
• Ask about their 503A or 503B status
• Request their last FDA inspection results (if they're a 503B)
• Understand their quality control processes
• Ask about their insurance and liability coverage

Rimo Health pre-integrates with pharmacies that have proven track records and maintain compliance. This is one area where trying to build everything yourself is a massive risk.

Build Proper Patient Intake Processes

The FDA expects you to screen patients appropriately before prescribing any medication, compounded or not. Your intake process should include:

• Comprehensive medical history
• Current medications (to check for interactions)
• Contraindication screening
• BMI and health metrics
• Previous experience with the medication
• Clear informed consent about what they're receiving

Don't cut corners here. Patients should understand they're receiving a compounded medication, not the brand-name drug.

Train Your Providers

If you're working with independent providers (rather than a provider network), ensure they understand:

• State-specific prescribing rules
• The difference between commercial and compounded medications
• Documentation requirements
• When to decline prescribing

This is where having a strong medical director who understands compliance is critical.

Be Careful with Marketing

This is where founders get in the most trouble. The FDA has been increasingly aggressive about telehealth marketing, particularly for weight loss medications.

Avoid:

• Claiming compounded semaglutide is "Ozempic"
• Suggesting results that aren't typical
• Making claims without proper substantiation
• Advertising controlled substances

Do:

• Be clear that you're offering compounded medications
• Include appropriate disclaimers
• Focus on the service you provide (convenient access, provider consultations, etc.)
• Work with marketing partners who understand healthcare compliance

The Bottom Line

Compounded medications in telehealth are absolutely legal and viable — millions of patients benefit from compounded drugs every year. But the regulatory landscape requires intentionality.

The founders who succeed in this space:

• Understand the distinction between 503A and 503B
• Work with compliant pharmacy partners
• Build proper patient intake and screening processes
• Train their providers on compliance requirements
• Market their services carefully and accurately
• Get LegitScript certified if they want to advertise

The founders who fail usually do so because they didn't understand these basics, or they assumed someone else was handling compliance when nobody was.

Disclaimer: I'm not a lawyer, and this isn't legal advice. The regulatory landscape for telehealth and compounded medications changes frequently. Before launching any telehealth brand, consult with a healthcare attorney who can review your specific business model and operations.

The opportunity in D2C telehealth is massive. Weight loss, men's health, women's health — these are billion-dollar markets with massive unmet demand. Build your business on a compliant foundation, and you'll be able to scale with confidence.

If you're evaluating whether to build your own infrastructure or work with a platform that handles the compliance heavy lifting, that's a conversation worth having. The real cost of non-compliance isn't just legal risk — it's the inability to advertise, process payments, or build a brand that patients trust.

---*

Ready to explore what's possible? The Rimo team has helped hundreds of founders launch compliant D2C telehealth brands. Book a discovery call to discuss your specific opportunity.