How to Verify a Telehealth Provider Is Legitimate: MICC Safety Checklist

How to Verify a Telehealth Provider Is Legitimate: MICC Safety Checklist

The rapid growth of telehealth has created opportunity for legitimate medical services—and opportunity for scams. You can be sitting at home filling out a questionnaire, credit card ready, before you fully verify whether the “doctor” on the other end is actually licensed, whether the “clinic” has proper oversight, or whether you're about to send money to a company that will disappear after charging you.

For ED-specific checks, use our compounded ED telehealth prescriber, pharmacy, and formula checklist.

This guide gives you a practical checklist to verify a telehealth provider is actually legitimate before you hand over your health information or money. Think of this as your consumer protection guide to online medical services.

Provider Credential Verification: The Foundation

The most important thing to verify is whether the person claiming to be a doctor, nurse practitioner, or physician assistant is actually licensed and in good standing.

Step 1: Identify the actual provider

Many telehealth websites are vague about who you'll actually be talking to. You might see “Our medical team” or “Experienced clinicians” without names. If possible, request to know the specific provider's name before your consultation. If the company refuses to name a provider or says you'll “see whoever is available,” that's a minor red flag—it suggests they're not confident in individual provider quality.

Step 2: Look up the provider's license

Every state has a medical board. Google: “[Your state] medical board license verification” or “[Your state] nursing board.” Most states have online databases where you can search by provider name or license number and confirm:

• The provider is actually licensed
• Their license is current (not expired)
• They're licensed in YOUR state (not just another state—this matters for telehealth)
• There are no disciplinary actions or complaints on their record

Example searches:

• California Medical Board: mbc.ca.gov (search by provider name)
• Texas Medical Board: tmb.state.tx.us
• New York State Department of Health: health.ny.gov (search providers)
• National Practitioner Data Bank: npdb.hrsa.gov (federal database; shows any disciplinary actions across states)

If a provider's license doesn't show up, or shows as expired, or you find disciplinary actions—stop. Don't use that service.

Step 3: Verify provider type

Different states regulate different provider types differently. You should know what type of provider you're seeing:

• MD (Medical Doctor): Attended medical school, completed residency, passed licensing exams. Highest level of training and autonomy.
• DO (Doctor of Osteopathy): Similar to MD—attended medical school, completed residency. Focuses on whole-body approach but has same prescribing authority.
• NP (Nurse Practitioner): Registered nurse with additional master's-level training. Can prescribe in most states but typically under some supervision. Scope varies by state.
• PA (Physician Assistant): Specialized training program (2-3 years post-bachelor's). Can prescribe but typically works under physician supervision. Scope varies by state.
• LPN (Licensed Practical Nurse): Less training than RN; typically not prescribing medications independently.
• “Health Coach” or “Wellness Consultant”: Not a licensed medical provider. Cannot prescribe medications legally.

Any legitimate medical service for ED, testosterone, or GLP-1 prescriptions should have MD, DO, NP, or PA providers. If they use “health coaches” or “wellness consultants” for prescribing, that's illegal and unethical. Don't use them.

Company Credential Verification

Beyond individual providers, the company itself needs legitimate credentials and oversight.

Step 1: Check company registration

Legitimate telehealth companies are registered businesses. They should have:

• A physical address (not just a PO Box)
• A phone number you can call
• An “About Us” page with company history, founding date, and leadership
• Corporate registration in their state of operation (you can search state business records)

If a telehealth company has no physical address, only a contact form with no phone number, or vague information about who runs it, these are red flags.

Step 2: Check for DEA and state pharmacy board registration

If the company is prescribing controlled substances (stimulants for ADHD, for example) or dispensing medications directly, they need DEA (Drug Enforcement Administration) registration. You can verify this at: diversion.usdoj.gov/csat/rtc_find.cfm

If they're running their own pharmacy, verify the pharmacy is licensed and accredited by checking with your state's board of pharmacy.

Step 3: Check HIPAA compliance

If they're handling your medical information, they're required by law (HIPAA) to protect your privacy. Their website should state: “This service complies with HIPAA” or similar language. Check their privacy policy. If there's no mention of HIPAA or if the privacy policy is vague, ask them directly: “Are you HIPAA compliant?” Any reluctance to answer is a red flag.

Step 4: Verify telehealth licensing

Some states have specific telehealth registration requirements or licensing. A few states require telehealth services to register with the state medical board. If your state has this requirement and the service isn't registered, they may be operating illegally.

Business Practice Red Flags

Beyond licensing, the way a company conducts business can signal legitimacy or fraud.

Red flag: No consultation before prescription

Legitimate providers do at least a brief consultation before prescribing. They ask questions about your health, current medications, and contraindications. If a telehealth service lets you order medication after a 2-minute questionnaire with no provider interaction, they're not practicing safe medicine. This is particularly important for controlled substances or medications with serious side effects.

Red flag: Automatic prescribing without evaluation

“Fill out this form and you're automatically approved for medication” is not how responsible medicine works. Your health matters. Every person is different. Automatic prescribing suggests the service prioritizes speed and revenue over safety.

Red flag: No medical records or documentation

You should be able to access your medical records from the telehealth service. You should have documentation of what was prescribed and why. If the service doesn't provide this, you have no proof of what was discussed or why a medication was recommended. This is a serious red flag.

Red flag: Obscure or hidden pricing

Transparent pricing is a hallmark of legitimate business. Legitimate telehealth services show you the full cost upfront:

• Consultation cost (or “free first visit”)
• Medication cost
• Any program or membership fees
• Shipping costs
• Any other charges

If costs are hidden until checkout, if there are surprise charges later, or if you discover auto-renewal you didn't agree to, that's fraud. Avoid these services.

Red flag: Impossible claims

“Guaranteed results,” “100% effective,” “Works for everyone”—these are false. Even FDA-approved medications work for 70-85% of people. Any service making absolute promises is exaggerating or lying.

Red flag: No follow-up or monitoring

Good medical care includes follow-up. After prescribing a medication, a responsible provider checks in: How's it working? Are you experiencing side effects? Do we need to adjust the dose? If a telehealth service prescribes once and never checks on you, they're not practicing good medicine.

Red flag: Pressure to buy additional services or products

“You'll get better results if you also buy our supplement package!” or “For only $200 more, you can get our premium program!” is pressure sales tactics. Legitimate medical providers recommend what patients need, not what makes them the most money.

Red flag: No emergency protocol

Ask: What if I experience severe side effects? What do I do? A legitimate service has an answer: “Call us immediately” or “Go to an ER, and we'll coordinate with them.” If they say “We can't help with emergencies,” they shouldn't be prescribing.

Customer Service and Refund Policy Verification

How a company treats customers before and after purchase tells you a lot.

Before you buy, test their customer service:

• Email them a question. How long does it take to respond? Is the response helpful or generic?
• Call their phone number. Does someone actually answer, or is it an endless wait?
• Ask about their refund policy. Can you get a refund if the medication doesn't work? Is it easy or complicated?
• Check their FAQ page. Does it answer common questions clearly, or is it vague?

Red flags in customer service:

• No phone number or email contact
• Slow response times (days or weeks)
• Unhelpful responses that don't answer your question
• No refund policy listed, or refund policy with impossible conditions (“Only if unopened,” etc.)
• Difficult cancellation process

Look for review mentions: When reading independent reviews (Google, Trustpilot, Reddit), pay attention to customer service complaints. “Couldn't reach support,” “They ignored my emails,” “Impossible to cancel” appear repeatedly in reviews of sketchy services.

Third-Party Verification and Reviews

Step 1: Check Better Business Bureau (BBB)

Go to bbb.org and search for the telehealth company. Look for:

• Overall rating (A+ is best; F is worst)
• Number and nature of complaints
• How the company responds to complaints (legitimate companies respond and try to resolve; sketchy companies ignore complaints)

A perfect 5.0 rating with dozens of reviews is suspicious (probably fake). A realistic rating of 3.5-4.5 with a mix of positive and critical reviews is more trustworthy.

Step 2: Search independent reviews

Google the company name + “reviews”. Look for trustworthy review sites:

• Trustpilot.com
• Google Reviews
• Reddit communities (r/Telemedicine, r/Health, r/offmychest)
• Online forums related to the specific condition (e.g., r/EytDysfunction for ED telehealth)

Be skeptical of:

• All 5-star reviews (probably fake)
• All 1-star reviews (could be competitor sabotage, though multiple consistent complaints warrant attention)
• Generic reviews that could apply to any service (“Great product!” with no detail)

Look for specific, detailed reviews: “I had a video consultation with Dr. Smith on [date]. She asked about [issues], prescribed [medication], and checked on me two weeks later. Cost was $X. Results: [specific outcome].” These detailed reviews are more trustworthy than generic praise or complaints.

Step 3: Search for lawsuits or FDA warnings

Google: “[Company name] lawsuit” and “[Company name] FDA warning”

If multiple lawsuits appear or if there's an FDA warning, take it seriously. Check what the lawsuits are about and whether the company resolved them. Some companies do get sued and successfully resolve issues; others have ongoing patterns of fraud.

Credential Verification Checklist: Quick Reference

Before you sign up for or pay any telehealth service, work through this checklist:

Provider Level
☐ Do I know the name of my provider (not just “medical team”)?
☐ Is my provider MD, DO, NP, or PA (not “health coach” or “wellness consultant”)?
☐ Can I look up their license on my state medical board website?
☐ Does their license show as current and unrestricted?
☐ Are there any disciplinary actions or complaints on their record?
☐ Are they licensed in my specific state?

Company Level
☐ Can I find the company's physical address (not just PO Box)?
☐ Can I call a real phone number and reach a human?
☐ Is the company registered as a business in their state?
☐ If prescribing controlled substances, are they DEA-registered?
☐ Do they claim to be HIPAA compliant (and can I verify this)?
☐ Is their pricing transparent and fully disclosed upfront?

Business Practice Level
☐ Do they do a consultation before prescribing (not automatic approval)?
☐ Do they provide copies of your medical records?
☐ Do they follow up after prescribing (not just one-and-done)?
☐ Do they have an emergency protocol if I experience side effects?
☐ Is their refund/cancellation policy reasonable and easy to execute?
☐ Do they respond promptly to customer service inquiries?
☐ Do they make realistic claims (not “100% guaranteed” or “works for everyone”)?

Reputation Level
☐ Do they have a reasonable BBB rating with mixed reviews?
☐ Are there detailed, specific positive reviews on independent sites?
☐ Are there consistent complaints patterns, or are complaints rare and specific?
☐ Are there lawsuits or FDA warnings? If yes, were they resolved?
☐ Can I find recent reviews (within the last 6 months)?

If you check all these boxes, you've likely found a legitimate service. If you can't verify several of these, or if red flags appear, keep looking.

What to Do If Something Feels Wrong

If you've already used a service and something seems off:

• Document everything: Save all emails, screenshots of charges, copies of prescriptions, and notes about your interactions.
• Request your medical records: By law (HIPAA), you can request and receive copies of all medical records. This creates official documentation of what was discussed and prescribed.
• Dispute charges if appropriate: If you were charged without authorization or for services you didn't receive, dispute the charge with your credit card company or bank.
• File complaints: Report the service to the state medical board, state attorney general, and the FDA (medwatch.fda.gov).
• Don't be embarrassed: If something fraudulent happened, it's not your fault. These scams are sophisticated. Reporting them helps protect others.

Legitimate Telehealth Red Flags in One Quick Reference

Bottom Line: Trust But Verify

Telehealth is legitimate and valuable. But the industry includes bad actors. Spending 30 minutes verifying a provider's credentials before you use their service is time well spent. You're trusting someone with your health and medical information—they should be easily verifiable as real.

Use the checklist in this guide. Look up licenses. Check reviews. Ask questions. Legitimate providers will have nothing to hide and will be happy to verify their credentials. Sketchy services will be vague, defensive, or difficult to reach.

And if you find a reputable telehealth service you're happy with, tell people! Leave a detailed review. This helps others find legitimate providers and avoid scams.

For our reviews of specific telehealth services, including provider verification and business practice assessment, see our detailed telehealth provider guides.

MercyIowaCityClinics.org is an independent editorial publication. We are not affiliated with any hospital, clinic, or medical provider. This guide is for consumer protection and educational purposes only.