Who We Insure
GLP-1 Telehealth Insurance: Compounded-Drug Claims, Advertising Scrutiny and Affiliated-Practice Prescribing
A GLP-1 telehealth company sells a prescription outcome through a website, and that sentence contains every exposure the insurance program has to handle. The main risks are a patient harmed by a compounded or mis-dosed medication who sues the platform as well as the prescriber and the pharmacy, a state attorney general or the FTC challenging how the weight-loss results were advertised, and a regulator asking whether the affiliated medical practice is really independent of the company that owns the brand. Each of those claims reaches a different policy, and the gaps between them are where most GLP-1 telehealth programs fail.
Why GLP-1 & weight-loss telehealth companies carry specialized insurance
The business model drives the exposure. Most platforms operate through an affiliated professional corporation that employs or contracts the prescribers, a management services company that owns the technology and the marketing, and a network of compounding or retail pharmacies that fill the orders. Patients see one brand. Plaintiffs name all three, and the first question in any claim is which entity did what and which policy responds for it. This guide covers telehealth malpractice for the affiliated practice, products liability for compounded medications, Tech E&O, cyber for weight and health data, and D&O, along with what pharmacy partners require and what underwriters ask about sourcing and prescribing protocols.
Who this guide is for
Written for founders, medical directors, general counsel, and operations leads at GLP-1 telehealth companies, direct-to-consumer weight-loss platforms, and digital clinics that prescribe semaglutide, tirzepatide, or other obesity medications online. Direct-to-consumer telehealth brands prescribing GLP-1 medications through an affiliated professional corporation; Compounding-based platforms sourcing from 503A and 503B pharmacies, and platforms transitioning to branded supply; Employer and payer weight-management programs that combine prescribing with coaching; Not for in-person medical spas and clinics — the medical spa guide covers premises-based practices.
The risk profile of a GLP-1 telehealth company
GLP-1 telehealth claims arrive from patients, regulators, and competitors at the same time. The drugs are effective and widely demanded, the supply chain has been unstable, and the marketing has been loud, which is a combination that attracts both litigation and enforcement. Key exposures: Patient injury claims involving compounded GLP-1 products — dosing errors from vial-and-syringe instructions, contamination, or ingredients that differ from the approved drug; Telehealth malpractice allegations over inadequate screening: thyroid or pancreatitis history, eating disorders, pregnancy, or drug interactions missed in an asynchronous intake; Advertising and consumer-protection actions over weight-loss claims, before-and-after imagery, subscription cancellation practices, and the use of brand names for compounded products; Corporate practice of medicine and fee-splitting challenges to the management-services structure, and prescribing across states where the clinician is not licensed; Breaches of weight, medication, and payment data, including tracking pixels that sent health information to advertising platforms; Investor and D&O claims when compounding supply ends, branded pricing changes, or a regulatory action forces a business-model change.
Telehealth Medical Malpractice for GLP-1 & weight-loss telehealth companies
The prescribers, the medical director, and the affiliated professional corporation need medical professional liability written for asynchronous and video prescribing across many states. The policy should name the professional corporation and the management company as insureds or additional insureds, follow the clinicians into every state they are licensed in, and respond to claims that the screening protocol itself — not an individual clinician's judgment — caused the injury. Individual clinician policies rarely cover the platform.
Products Liability for Compounded Medications for GLP-1 & weight-loss telehealth companies
A platform that selects the pharmacy, sets the formulation, brands the vial, and ships it to the patient is in the chain of distribution whether or not it holds a pharmacy license. Products liability responds to bodily-injury claims from a defective or contaminated product. Many forms exclude compounded drugs or pharmaceuticals altogether, so the coverage has to be negotiated explicitly, and the pharmacy's own policy should name the platform as an additional insured with a contractual indemnity behind it.
Technology E&O for GLP-1 & weight-loss telehealth companies
The intake engine, the eligibility logic, the e-prescribing integration, and the refill automation are software, and a defect in any of them is a technology error with a medical consequence. Tech E&O covers claims that the platform failed to perform and should be coordinated with the malpractice form so neither carrier treats the claim as the other's.
Cyber Liability for GLP-1 & weight-loss telehealth companies
Weight, body measurements, medication history, photos, and payment details are sensitive by any standard and regulated under HIPAA where a covered entity is involved and under the FTC's Health Breach Notification Rule where it is not. Cyber funds breach response, regulatory defense, and liability, and the application will ask directly about advertising pixels and session-replay tools on patient pages, because that is where recent enforcement has focused.
Directors & Officers Liability for GLP-1 & weight-loss telehealth companies
GLP-1 telehealth companies raised money quickly on compounding economics and then faced supply and regulatory shifts. D&O covers investor claims over disclosure and strategy and defends the company and its officers in regulatory investigations, which in this sector are frequent and public.
Contract and certificate requirements
Pharmacy partners require the platform to carry malpractice for the affiliated practice, products liability, and cyber, and they expect indemnification for claims arising from prescribing decisions. Payment processors and subscription-billing providers increasingly ask for evidence of cyber and consumer-protection compliance before underwriting a weight-loss merchant account. Employer and payer customers add business associate agreements and Tech E&O requirements. The management services agreement between the brand and the professional corporation should state who buys malpractice, who is named on it, who carries cyber for the shared patient record, and how indemnities run. Underwriters read that agreement, and claims lawyers read it harder.
What coverage costs
Malpractice pricing for the affiliated practice depends on prescription volume, the share of compounded versus branded supply, the screening protocol and whether synchronous visits are required, the number of states served, clinician credentials and supervision, and claims history. Platforms that moved to branded supply or added video visits generally present better than vial-and-syringe compounding programs. Products liability availability, not only price, depends on the compounding pharmacies used and their inspection histories. Cyber pricing turns on advertising-technology hygiene and access controls. D&O pricing reflects capital raised and regulatory history.
What underwriters will ask for
Underwriters for GLP-1 telehealth want the clinical and the commercial story in one package, because the two are inseparable in a claim. Have ready: Entity chart: brand company, management services organization, affiliated professional corporation, and the contracts between them; Prescribing protocol, exclusion criteria, synchronous versus asynchronous visit policy, and follow-up schedule; Pharmacy list with 503A or 503B status, state licenses, inspection history, and the indemnity and insurance terms in each agreement; Medication sourcing mix — compounded, branded, or both — and the transition plan if compounding ends for a product; Advertising review process, claims substantiation files, subscription cancellation flow, and any regulator correspondence; Data map for patient information, advertising pixels in use, and the HIPAA or FTC breach-rule analysis for each data flow.
Illustrative example: The vial with the wrong instructions
A patient receives a multi-dose vial of compounded medication with dosing instructions in milligrams while the syringes are marked in units. She takes several times the intended dose, is hospitalized, and sues the platform, the prescribing clinician, and the pharmacy. Telehealth malpractice defends the clinician and the affiliated practice for the prescribing decisions, products liability responds to the allegation that the product as packaged was defective, and the pharmacy's policy responds for the compounding itself. Who authored the instructions decides which policy pays what.
Illustrative example: The advertising inquiry
A state attorney general sends a civil investigative demand about weight-loss claims in paid social advertising, the use of a branded drug name to describe a compounded product, and a subscription that was hard to cancel. The inquiry names the brand company and its chief executive. The D&O policy's regulatory coverage funds counsel for the company and the officer, subject to its investigation sublimit. Advertising liability under the media or E&O component may respond to competitor or consumer claims that follow. Fines and restitution are excluded, so the covered value is in the defense.
Illustrative example: The pixel on the intake page
A security review finds that an advertising pixel on the intake flow transmitted body-mass index, medication selection, and hashed email addresses to an advertising platform for over a year. A class action follows, alleging unauthorized disclosure of health information. Cyber responds to the privacy liability claim and the regulatory inquiry, subject to how the policy treats wrongful collection and pixel-tracking claims, which some forms now sublimit or exclude. The forensic and notification costs sit under the first-party agreements.
What does insurance cost for a GLP-1 telehealth company?
Pricing is specific to the model: prescription volume, compounded versus branded supply, synchronous or asynchronous visits, states served, the pharmacies used, advertising practices, and claims history all move it. As of 2026, the harder question is often availability of products liability for compounded products rather than price, so sourcing decisions directly affect what can be bought.
Does the affiliated medical practice need its own malpractice policy?
Yes. The professional corporation that employs or contracts the prescribers is the entity sued for care decisions, and the clinicians' individual policies usually do not extend to it or to the management company. A practice-level telehealth malpractice policy naming both entities is the standard structure.
Who is liable when a compounded GLP-1 product injures a patient?
Potentially the pharmacy that made it, the clinician who prescribed it, and the platform that selected the pharmacy, branded the product, and shipped it. Plaintiffs name everyone and let discovery sort out responsibility, so the platform needs products liability and a pharmacy agreement with indemnification and additional-insured status running in its favor.
Does HIPAA apply to a direct-to-consumer GLP-1 platform?
It applies where the affiliated practice or the pharmacy is a covered entity and the platform handles their protected health information as a business associate. Where it does not, the FTC's Health Breach Notification Rule and state consumer health data laws do, and enforcement under those rules has focused on exactly this kind of app.
What happens to coverage when compounding is no longer permitted for a drug?
Products liability for past shipments remains important because injuries can surface later, and claims-made forms require the policy to stay in force or carry an extended reporting period. The transition to branded supply usually improves future terms, but the historical compounding exposure should be disclosed and kept covered.
Caveats and common gaps
Products liability forms commonly exclude pharmaceuticals or compounded products unless specifically negotiated. Malpractice and Tech E&O forms both contain exclusions that can point at the other policy for a prescribing-software claim. Pixel-tracking and wrongful-collection claims are increasingly sublimited or excluded under cyber forms. Regulatory coverage under D&O funds defense, not fines or restitution.
Related guides
Insurance for Telehealth Platforms — the general telehealth program this page builds on · Insurance for Medical Spas — premises-based weight-loss and aesthetic practices · Insurance for Healthtech Companies · Insurance for Femtech & Fertility App Companies — consumer health data rules that apply the same way · Insurance for Digital Therapeutics Companies · Tech E&O insurance · Cyber liability coverage
Frequently asked questions
What does insurance cost for a GLP-1 telehealth company?
Pricing is specific to the model: prescription volume, compounded versus branded supply, synchronous or asynchronous visits, states served, the pharmacies used, advertising practices, and claims history all move it. As of 2026, the harder question is often availability of products liability for compounded products rather than price, so sourcing decisions directly affect what can be bought.
Does the affiliated medical practice need its own malpractice policy?
Yes. The professional corporation that employs or contracts the prescribers is the entity sued for care decisions, and the clinicians' individual policies usually do not extend to it or to the management company. A practice-level telehealth malpractice policy naming both entities is the standard structure.
Who is liable when a compounded GLP-1 product injures a patient?
Potentially the pharmacy that made it, the clinician who prescribed it, and the platform that selected the pharmacy, branded the product, and shipped it. Plaintiffs name everyone and let discovery sort out responsibility, so the platform needs products liability and a pharmacy agreement with indemnification and additional-insured status running in its favor.
Does HIPAA apply to a direct-to-consumer GLP-1 platform?
It applies where the affiliated practice or the pharmacy is a covered entity and the platform handles their protected health information as a business associate. Where it does not, the FTC's Health Breach Notification Rule and state consumer health data laws do, and enforcement under those rules has focused on exactly this kind of app.
What happens to coverage when compounding is no longer permitted for a drug?
Products liability for past shipments remains important because injuries can surface later, and claims-made forms require the policy to stay in force or carry an extended reporting period. The transition to branded supply usually improves future terms, but the historical compounding exposure should be disclosed and kept covered.
This material is general educational information, not legal, tax, or insurance advice. Coverage availability, policy terms, and regulatory requirements vary by state, carrier, and applicant.