GLP-1 Telehealth: Fewer Than a Third Consult a Doctor

A Yale “secret shopper” analysis of nearly 50 telehealth companies selling GLP-1 drugs found fewer than a third required any real-time video or audio consultation with a physician, and some prescriptions were approved within minutes. The Associated Press reported the finding on Saturday, September 19, 2026, by Matthew Perrone (AP).

The study is a JAMA research letter, “Online Prescribing of GLP-1 Receptor Agonists,” by Ashwin K. Chetty and Dr. Reshma Ramachandran of Yale, published online July 6, 2026 (print: JAMA 336(5):428-431, August 4, 2026) (JAMA). It is paywalled; its figures below come via Healio and Yale’s release.

How many GLP-1 telehealth companies actually talk to a doctor?

Fewer than one in three. In the Yale analysis, 49 websites selling GLP-1 drugs were tested with a standard patient profile: 26.5% required a video visit and 6.1% required a phone call with a clinician — 32.6% combined. The rest prescribed without any real-time consultation, and, as the FTC’s complaint notes, “most states do not require real-time (synchronous) telehealth consultations.”

What the Yale study found

They tried 49 websites with a profile of a 27-year-old man who qualified for a GLP-1. Overall, 92% prescribed the medication and 69% mailed it (Yale School of Medicine).

Ramachandran, the senior author, told AP: “What we saw overwhelmingly was that it was incredibly easy to get access to the GLP-1s.” Screening was thinner still: Healio reports that 55.1% of intake questionnaires asked about eating disorders — a gap the authors called “particularly concerning given that GLP-1s may induce or worsen eating disorders.”

The FTC’s case against Hims & Hers

On July 29, 2026, the FTC — joined by Utah and California, by and through Los Angeles County Counsel — sued Hims & Hers, alleging it shared consumers’ sensitive health information with third-party advertising platforms despite claiming to protect it, and deceived users about billing and cancellation (FTC).

The complaint (Case 3:26-cv-07871, Doc 1, filed July 29, 2026) alleges Hims shared health information with platforms “such as Meta Platforms, Inc. (“Meta”) and Snap Inc. (“Snap”).” Hims disputes the claims, calling the action “an effort to generate headlines at our expense.” The case is pending in the Northern District of California.

The FTC’s other telehealth and health-data cases

AP reports similar FTC cases against more than a half-dozen telehealth companies — AP’s count, not the FTC’s. Those with public FTC pages include BetterHelp (March 2, 2023), ordered to pay $7.8 million over data shared with “Facebook, Snapchat, Criteo, and Pinterest,” and GoodRx (Feb. 1, 2023), which paid a $1.5 million civil penalty over prescription and condition data shared with “Facebook, Google, and Criteo” and “Branch and Twilio.” Google is not named in the BetterHelp action.

Why HIPAA usually does not cover a telehealth company

HIPAA applies to health plans, providers that conduct standard health care transactions electronically, and clearinghouses — “not telehealth companies offering prescriptions, counseling, DNA tests and other online services,” as AP puts it (FTC guidance).

What applies instead is the FTC Act and the Health Breach Notification Rule, amended in 2024 and still covering most health apps. On September 9, 2026 the FTC rescinded its 2021 Policy Statement on Breaches by Health Apps and Other Connected Devices (FTC) — one guidance document withdrawn, not the rule itself.

What this means if you are buying GLP-1s online

AP’s advice is blunt: “The only surefire way to protect your information may simply be to decline the terms of service.” That is impractical for most buyers, so the narrower questions matter: who writes the prescription, which pharmacy fills it, and what the intake form does with your answers. Check the pharmacy before the brand — our compounding pharmacy checklist covers 503A and 503B licences and LegitScript certification. The GLP-1 telehealth pricing comparison adds membership and medication into one monthly figure. The questions worth asking of that figure, and of any competitor’s, are in How to Tell If a GLP-1 Price Comparison Is Trustworthy. The same companies already sell compounded peptides, part of a broader telehealth pivot into peptides shaping the next round of consent screens.

Frequently asked questions

How many GLP-1 telehealth companies actually talk to a doctor?

Fewer than one in three. Of 49 websites selling GLP-1 drugs in a Yale secret-shopper study, 26.5% required a video visit and 6.1% required a phone call with a clinician. The rest prescribed without any real-time consultation, and most US states do not require one.

Does HIPAA protect my health data on a GLP-1 telehealth site?

Usually not. HIPAA covers health plans, providers that conduct standard health care transactions electronically, and clearinghouses — not telehealth companies selling prescriptions online. Most health apps fall under the FTC Act and the Health Breach Notification Rule instead.

Did the FTC stop regulating health apps in September 2026?

No. On September 9, 2026 the FTC rescinded a 2021 policy statement about breaches by health apps and connected devices. The Health Breach Notification Rule, amended in 2024, still covers most health apps.

Sources

1. AP wire copy, Matthew Perrone — as served by ABC7 Chicago; the canonical apnews.com URL returned HTTP 403 to this host and has no Wayback capture.
2. FTC press release, “FTC, States Act Against Hims & Hers” — July 29, 2026.
3. FTC v. Hims & Hers complaint, Case 3:26-cv-07871, Doc 1 — filed July 29, 2026; footnote 1 and paragraph 66.
4. Yale School of Medicine news release — July 7, 2026, via the Internet Archive.
5. Healio, secret-shopper study coverage — July 9, 2026; source of the 26.5%, 6.1% and 55.1% figures, which the paywalled JAMA letter could not be read to confirm.
6. JAMA research letter record, DOI 10.1001/jama.2026.9131 — online July 6, 2026; print JAMA 336(5):428-431, August 4, 2026.
7. FTC, BetterHelp order — March 2, 2023.
8. FTC, GoodRx order — February 1, 2023.
9. FTC, withdrawal of the 2021 health-apps policy statement — September 9, 2026.
10. FTC business guidance, “Collecting, Using, or Sharing Consumer Health Information” — HIPAA scope, FTC Act and the Health Breach Notification Rule.

This article is for informational purposes only and is not medical advice. The FTC’s allegations are allegations; Hims & Hers disputes them.