thimblehub
All resources

Verticals9 min readBy the thimblehub team

How to start a GLP-1 telehealth business in 2026 (semaglutide and tirzepatide)

The legal routes for selling semaglutide and tirzepatide, where FDA rules stand in October 2026, launch steps with an owner on each, and how fast you can go live.

To start a company selling semaglutide or tirzepatide, you launch a telehealth brand. Licensed clinicians from a clinician network prescribe after an online visit, a licensed pharmacy fills each prescription, and your company runs the brand, site, checkout and patient care around them. You don't need your own pharmacy or medical license. In 2026 the main route is FDA-approved GLP-1s, and some brands add compounded prescriptions from a 503A pharmacy, one patient at a time, when the prescriber documents a significant clinical difference for that patient. thimblehub sets up and runs your checkout, intake, patient and admin portals and site, fully managed, on the clinician network and pharmacy you choose, and introduces both if you need them.

The same steps start any weight loss telehealth company. Many states limit who can own a medical practice, so have a healthcare attorney set up your company structure and check your plan before you sell.

Where GLP-1 rules stand on October 12, 2026

  • Shortages are over. FDA confirmed the tirzepatide shortage resolved on December 19, 2024, and declared the semaglutide shortage resolved on February 21, 2025. The grace periods for compounders ended by May 22, 2025.
  • Compounders lost on appeal. On August 27, 2026, the Fifth Circuit upheld FDA's decisions ending both shortages.
  • Copy rules restated. On April 1, 2026, FDA reminded 503A pharmacies and 503B facilities of the limits on compounding drugs that are essentially copies of approved ones.
  • Still pending. FDA proposed on May 1, 2026 to keep semaglutide, tirzepatide and liraglutide off the 503B bulks list. Comments closed July 30, 2026, and no final decision had been published.
  • Enforcement continues. FDA said on February 6, 2026 it intends to restrict GLP-1 ingredients used in mass-marketed compounded drugs, and warned 30 more telehealth companies on March 3, 2026. On September 18, 2026 it warned a 503A compounding pharmacy that its semaglutide and tirzepatide products appeared to be essentially copies of the approved drugs.

Your route decides what you can sell, who fills it and what your ads can say.

GLP-1 routes in 2026
RouteWhere it standsWhat patients getWho fills it
FDA-approved GLP-1sOpen. Both shortages have ended.Brands such as Wegovy or Zepbound injections, or Foundayo, a daily pill FDA approved on April 1, 2026A licensed pharmacy, retail or mail-order
503A compoundingNarrow. Routine copies of approved drugs are off limits.A compounded prescription for one patient, with a change the prescriber documents as a significant difference for themA state-licensed 503A pharmacy
503B outsourcingClosed for these drugs. Neither is on the 503B bulks list or the shortage list.Drugs compounded in bulk, without a prescription for each patientAn FDA-registered outsourcing facility
A clinic or med spa adding online careSame rules, plus each patient's state telehealth rules.Any open route above, prescribed by your own cliniciansA licensed pharmacy

In every route, a licensed clinician prescribes after a visit. Sources: FDA GLP-1 compounding policy page (updated April 1, 2026), FDA's Foundayo approval (April 1, 2026), 21 U.S.C. 353a and 353b, Federal Register 91 FR 23431 (May 1, 2026). Checked October 12, 2026.

The 503A route is narrow. FDA considers a compounded drug essentially a copy when it has the same active ingredient at a similar strength, taken the same way, as an approved drug, and semaglutide with added B12 can still count when the strengths sit within 10% of the approved products. A copy is allowed only when the prescriber decides and documents, for that patient, a change that makes a significant difference. FDA says it generally won't act on four or fewer prescriptions of a copy in a month, far below what a brand fills at scale.

503B outsourcing facilities register with FDA and can compound without a prescription for each patient. They can only use a bulk ingredient that's on FDA's 503B bulks list, or make a drug that's in shortage, and semaglutide and tirzepatide meet neither test. Our GLP-1 compliance guide covers how the rules got here.

Claims FDA has flagged in GLP-1 marketing

FDA has sent warning letters to telehealth companies since September 2025, and the wording it cites repeats. Keep these out of your site, ads and checkout:

  • "Same active ingredient as" a brand. FDA quoted this line in its September 9, 2025 letter to DirectMeds, and its February 6, 2026 statement says compounded GLP-1s can't be marketed this way.
  • "Generic" semaglutide or tirzepatide. Compounded drugs aren't generics. FDA approves generics and doesn't review compounded drugs before they're sold.
  • "Clinically proven" for a compounded drug. FDA's February 2026 statement names this claim too.
  • "FDA-approved pharmacy." FDA doesn't approve pharmacies or compounders, a point it made in a June 8, 2026 letter.
  • Your brand name on a compounded drug, with no qualifier. FDA's March 3, 2026 letters cite compounded drugs sold under a telehealth company's own name in a way that implies it made them.

Paid ads need one more step. Google and Meta both require LegitScript certification for telehealth advertisers that promote prescription drugs, plus each platform's own approval. Your site is built to LegitScript's requirements, and we support your certification with site changes, reviewer access to your portal and answers on how checkout and patient data work. Our LegitScript guide walks through the process.

Steps to launch, and who does each

  1. Your route, checked by an attorney

    You pick your route and walk a healthcare attorney through it: your company structure, your launch states, and what your site and ads will say.

  2. A clinician network

    You bring your clinician network, or we introduce one we work with and you agree terms directly. Networks we work with include MDI, OpenLoop, Beluga, Wizlo and Arora, and we connect any other network during setup.

  3. A licensed pharmacy

    You use your network's pharmacy or one you contract, or we introduce one. Compounded prescriptions go only to a state-licensed 503A pharmacy filling them patient by patient.

  4. The clinical protocol

    Your network's clinicians set the protocol: who qualifies, what rules a patient out, and how doses step up. We shape your intake around it.

  5. Your brand, set up and connected

    thimblehub sets up your site, checkout and intake, and patient and admin portals on your brand, your domain and your own payment processor, such as Stripe. Then we connect your network and pharmacy and turn on dispatch.

  6. A test order, together

    You and our team run a test order together, through every step a patient takes, before you go live.

Test orderYour admin portalPaymentPaidClinical reviewApprovedPharmacyDispatched

See a GLP-1 brand's checkout and portal

Open the demo set to weight care and click through the checkout, intake and patient portal your patients would use.

Open the weight care demo

What we set up for GLP-1 brands, and what we don't

We set up programs that sell FDA-approved GLP-1s, as injections or pills. We also set up lawful 503A programs, where your prescribers document a patient-specific change for each patient and a state-licensed pharmacy fills each prescription. Our GLP-1 stack guide breaks down each layer of a GLP-1 program.

We don't set up:

  • Compounded semaglutide or tirzepatide sold as a cheaper Wegovy, Ozempic, Zepbound or Mounjaro.
  • Salt forms such as semaglutide sodium or semaglutide acetate. FDA says it knows of no lawful basis for compounding with them.
  • Copy, ads or labels that call a compounded drug the same as, or a generic of, an approved one.

If part of your plan sits in a gray area, we'll say so on the first call and point you to an attorney we trust.

Keeping GLP-1 patients on their plan

GLP-1 care runs month after month, so refills are where a brand grows. We built refills on thimblehub to keep patients on plan with little effort from them or your team.

  • Refill check-ins. Before each refill, patients answer a short check-in in their portal on how they're doing, side effects and anything that's changed. You choose whether it's required, optional or off. A new pregnancy, a hospital stay or a dose change request is flagged to the clinician.
  • Renewals with the dose already proposed. When a prescription runs out of refills or expires, the renewal goes back to your clinician network automatically, with the check-in attached and the next dose proposed from the last approved one. The prescriber makes the call.
  • Dose logs. Patients log each dose in the portal and see their plan, their shipments and their care team in one place.
  • A save flow. When a patient goes to cancel, the portal asks why and offers a pause or a skipped month that fits the reason.
  • Failed cards. The patient updates the card in the portal, and the refill ships once payment clears. Your team sees every held refill in the admin portal's refill queue.

More in how refills work on thimblehub.

How long a GLP-1 launch takes

Time to launch with thimblehub
Where you are when you signWhen you can go liveWhat we do
Clinician network and pharmacy in placeAs fast as 3 days after you signSet up your site, checkout, intake and portals, connect your network and pharmacy, and run a test order with you
No clinicians or pharmacy yetLonger. Setup finishes once your terms are signed.Introduce networks and pharmacies we work with. You agree terms with them directly.
Waiting on LegitScript certification for paid adsWhen your certification and marketing are ready. A recent brand went live the morning after.Support your certification with site changes, reviewer access and answers
Design revisions, marketing with us, or custom buildsEach adds timeScope the work with you on the first call

Launch times count from your signed contract.

What one call to thimblehub gets you

Tell us what you want to sell and what you already have. One call covers the rest:

  • Your site, checkout and intake, and patient and admin portals, set up and run by us on your brand and your domain.
  • Your clinician network and pharmacy connected, or introductions to ones we work with.
  • Ad tracking set up with your site, and campaigns run for you if you want them, as an added engagement.
  • People we trust for anything we don't do in house, such as legal work and LegitScript prep.
  • Your patients, data, domain and payment processor stay yours, and every customer gets a signed BAA.

Frequently asked questions

Is compounded semaglutide legal in 2026?
Only in narrow cases. Since the shortage ended, a state-licensed 503A pharmacy may compound semaglutide for an individual patient when the prescriber documents a change that makes a significant difference for that patient. Routine copies of Wegovy or Ozempic are off limits, and 503B outsourcing facilities can't compound it from bulk ingredients. FDA restated these limits on April 1, 2026.
Can I sell tirzepatide online?
Yes, as FDA-approved Zepbound or Mounjaro, prescribed by a licensed clinician after an online visit and filled by a licensed pharmacy. Compounded tirzepatide follows the same narrow 503A rule as semaglutide, and the Fifth Circuit upheld the end of the tirzepatide shortage on August 27, 2026.
Do I need my own pharmacy or medical license to start a GLP-1 company?
No. Your clinician network's clinicians hold the medical licenses, and a licensed pharmacy fills each prescription. Many states limit who can own a medical practice, so a healthcare attorney sets up your company structure.
How fast can I launch a GLP-1 brand?
As fast as 3 days after you sign. It takes longer if you still need a pharmacy or clinicians, are waiting on LegitScript certification, want website design revisions, are planning marketing with us, or need custom builds. A recent brand went live the morning after its LegitScript certification and marketing were ready.
Can I run Meta or Google ads for a GLP-1 brand?
Yes, once your brand holds LegitScript certification and each platform has approved you. Meta and Google both require LegitScript certification for telehealth advertisers that promote prescription drugs, and FDA's warning letters show ads can't call a compounded drug the same as an approved one.

Questions, or a topic you'd like us to cover? Book a call or email hello@thimblehub.com.

Sources

  1. FDA: Policies for compounders as national GLP-1 supply stabilizes (updated Apr 1, 2026)
  2. FDA: FDA intends to take action against non-FDA-approved GLP-1 drugs (Feb 6, 2026)
  3. FDA: FDA warns 30 telehealth companies against illegal marketing of compounded GLP-1s (Mar 3, 2026)
  4. FDA warning letter: DirectMeds (Sep 9, 2025)
  5. FDA warning letter: Medica Weight Loss (Jun 8, 2026)
  6. FDA warning letter to a 503A pharmacy over copies of semaglutide and tirzepatide (Sep 18, 2026)
  7. FDA: Concerns with unapproved GLP-1 drugs used for weight loss (updated Oct 1, 2026)
  8. FDA: Foundayo (orforglipron) approval (Apr 1, 2026)
  9. Federal Register: Proposal to keep semaglutide, tirzepatide and liraglutide off the 503B bulks list, 91 FR 23431 (May 1, 2026)
  10. Federal Register: Comment period extended to Jul 30, 2026, 91 FR 38719
  11. Fifth Circuit: Outsourcing Facilities Association v. FDA (tirzepatide), No. 25-10600 (Aug 27, 2026)
  12. Fifth Circuit: Outsourcing Facilities Association v. FDA (semaglutide), No. 25-10758 (Aug 27, 2026)
  13. 21 U.S.C. 353a, pharmacy compounding (section 503A)
  14. 21 U.S.C. 353b, outsourcing facilities (section 503B)
  15. Meta: Drugs and pharmaceuticals ad standard
  16. Google Ads policy: Healthcare and medicines

Try it with your brand

Type its name and watch the demo weight care checkout run under it.

Keep reading

All resources
  • GLP-1 compliance in 2026: what changedGLP-1 compliance in 2026 for telehealth founders and ops leads: where compounding stands after the FDA shortage rulings, the DEA rules, and what to change.10 min read
  • The seven layers of a GLP-1 telehealth stackA GLP-1 telehealth stack guide for founders launching a weight care brand in 2026: the seven layers from site to analytics, and where programs break.11 min read
  • How refills work on thimblehubHow refills run on thimblehub: reminders, quick check-ins, clinician-led dosing, billing on your own processor, portal tracking, and a refill queue for your team.4 min read

Your telehealth, fully managed

Fully managed checkout, patient and admin portals, and brand sites, set up on any clinician network and pharmacy you choose. Your patients, data, and payment processor stay yours.