LegitScript certification for Google Ads: who needs it and how long it takes
Online pharmacies, addiction treatment services and prescribing telehealth cannot advertise on Google without LegitScript certification in the markets Google names. It is paid, it takes weeks, and no amount of rewording gets around it — describing the service differently is circumvention, which costs the account permanently rather than temporarily.
- The auction
- Almost everyone finds this gate the wrong way round: the campaigns are built, the budget is approved, and then every ad is disapproved at once. The certification clock does not start until you apply, and a rejected application is slower to fix than a clean first one.
- The conversion
- a certified account serving ads
- Source of truth
- your Google Ads account status and the LegitScript portal
- Costliest mistake
- Building first and applying second. The build is worthless until the gate clears, and the weeks spent on keyword research would have been better spent on the application.
The short answer
To run Google Ads for advertisers in gated healthcare categories, optimize toward a certified account serving ads — recorded in your Google Ads account status and the LegitScript portal — rather than toward form fills or booked appointments. Almost everyone finds this gate the wrong way round: the campaigns are built, the budget is approved, and then every ad is disapproved at once. The costliest mistake is building first and applying second. Everything below is the build order, in the sequence you would actually work through it.
Written by Ariful Islam — eight years building Google Ads accounts and the conversion tracking underneath them.
Read this before step one
Google Ads does not fail on its own. It fails on top of three things that were already broken.
- 01
Conversion tracking that reports the truth
If Google is counting form fills rather than a certified account serving ads, every bid it makes is aimed at the wrong outcome. First-party, server-side, joined back to your own system — not a browser tag that a consent banner or a cookie policy can silence.
- 02
A landing page that answers the search
One page for every ad group means the page answers a general question when the search asked a specific one. Google scores that as poor landing page experience and charges you more per click for it.
- 03
The right campaign for the goal
Performance Max on a broken signal spends faster and explains less. Search first, on a conversion you trust, then expand — in that order, because the order is not a preference.
Get all three right and the playbook below compounds. Get the first one wrong and everything below is executed perfectly in the wrong direction — which is the single most expensive thing that happens in this channel.
Not sure which of the three is wrong on your account? Send it over and we will tell you what it is actually reporting.
Before anything else
Three categories are gated in the markets Google lists: online pharmacy, addiction treatment, and telehealth that prescribes. The line is not what you call yourself; it is what you actually do and where you do it.
- 01Do you dispense prescription medication? Pharmacy certification applies.
- 02Do you provide addiction treatment services in the US or Canada? Addiction certification applies.
- 03Does any part of your service result in a prescription written remotely? Telehealth certification applies.
- 04Check every market you intend to advertise in separately. The list differs by country.
So the plan is realistic
Certification is a paid annual process with a substantive review of your licensing, your clinical governance and your website. Budget weeks, not days, and budget for the fee.
- 01Expect several weeks from application to decision for a clean submission.
- 02Expect longer if licensing documentation is incomplete, which is the usual delay.
- 03It renews. Put the renewal date in a calendar owned by someone who will still be there.
- 04Pharmacy has alternatives — NABP VIPPS and .pharmacy — which suit traditional pharmacies better.
Where the weeks are lost
Most delay is documentation rather than judgment. Assemble everything before you start, because a part-complete application sits in a queue exactly as long as a complete one.
- 01Collect licences for every state or region you serve, current and legible.
- 02Document your clinical governance: who prescribes, under what protocol, with what oversight.
- 03Make your website match what you are claiming — the reviewer will read it.
- 04Name a single owner for the application. Split ownership is why these stall.
The most expensive mistake available
Rewording a gated service to avoid the category is circumvention of systems, which Google treats far more seriously than the original policy issue. A disapproval is temporary; a suspension for circumvention frequently is not.
- 01Do not describe a prescribing service as non-prescribing.
- 02Do not route gated traffic through an ungated landing page.
- 03Do not run the same service from a second domain to avoid the gate.
- 04If a vendor offers to get you round it, that vendor is selling you a suspension.
The weeks are not wasted
Certification blocks the ads, not the preparation. The work that makes the account good is the work that does not need approval.
- 01Build the conversion tracking and prove it against your own system.
- 02Write and check the landing pages against the policy you are about to be reviewed on.
- 03Build the negative keyword list properly.
- 04Run other channels if they are open to you. Not all of them carry the same gate.
Launch carefully, not fast
A newly certified account is reviewed more closely, not less. The first weeks set the pattern.
- 01Link the certification to the account before enabling campaigns.
- 02Start with a narrow, clearly compliant campaign rather than everything at once.
- 03Watch Policy Manager daily for the first fortnight.
- 04Keep a copy of what was approved. You will need it at renewal.
When Google Ads is the wrong answer here
Three situations where running this playbook will lose money. Read them before you fund the account, not after.
- You have not launched yet and nothing is broken. Build it right the first time — this page describes repairs, and repairs are more expensive than construction.
- The question is legal rather than technical. This page explains the mechanism and what it implies; it is not legal advice and does not replace your counsel's sign-off.
- You are looking for a way around a rule rather than a way to comply with it. Circumventing a platform's systems costs the account permanently, and we will not help with it.
Questions this raises
- How long does LegitScript certification take?
- Plan for several weeks from a complete application, longer if licensing documentation needs chasing. It is not a same-week process and it cannot be expedited by spending more on ads.
- Can I advertise while the application is pending?
- No. The gate applies until certification is granted and linked to the account.
- Is there an alternative for pharmacies?
- Yes — NABP's VIPPS and .pharmacy programmes are accepted for pharmacy specifically, and suit traditional US pharmacies. LegitScript has the broadest scope including telemedicine and international.
- What if only part of my service prescribes?
- Then that part is gated. Splitting the service across accounts to isolate it is legitimate; describing the prescribing part as something else is not.
- Does certification guarantee my ads run?
- No. It removes the gate. Everything else in Google's healthcare and misrepresentation policies still applies.
Five problems we get called in to fix
Every one of these arrived as “the campaign has stopped working”. None of them were the campaign. If you recognize your own symptom here, the cause is probably the one sitting next to it.
The reported number and the real number stopped agreeing.
Nothing joins the ad click to your Google Ads account status and the LegitScript portal, so the platform reports what it can see and nobody reconciles it.
Capture the click identifier at the form, store it against the record, send the outcome back when it is known.
Conversions collapsed and nothing in the account changed.
The tracking broke, not the campaign — a site update, a consent banner change, or a browser tightening cookie rules.
First-party server-side tagging, so measurement does not depend on a third-party cookie surviving, plus monitoring so the next break is an alert rather than a quarter.
Compliance asked a question nobody could answer in writing.
The tags were installed by whoever built the site, and no one has audited what leaves the page or where it goes.
An inventory of every tag on every clinical page, then a server-side container that redacts before anything is forwarded.
So what should you actually do with this?
Three honest options. The first one is genuinely fine for a lot of businesses, and we would rather you picked it knowingly than drifted into it.
Run it yourself
Good if you have the hours and someone technical
- A build, then a weekly routine that never stops
- You end up understanding your own account, which is worth real money later
- The measurement step still needs a developer
- Your mistakes are paid for at auction prices while you learn
Hire a general agency
Good if you want it off your desk this month
- Fast to start, and most are competent at the campaign work
- Usually optimizes toward whatever is easy to count — the form fill, the booked call
- Reports come from the ad platform's own numbers
- The measurement problem stays yours, because it lives in your systems
Work with us
Good if the reporting has stopped matching reality
- We build the measurement first — first-party, server-side, joined back to your Google Ads account status and the LegitScript portal
- Then we run the account on a conversion we can both check
- Reporting is against your numbers, not the Google column
- Eight years of this, and the tracking and the media are the same team
We are not going to promise you a number. Anyone who quotes you a return before seeing what your account currently reports is guessing, and the guess is always flattering. What we will tell you, for free and before any of this becomes a conversation about money, is what your account is actually measuring today.
Or we run it for you
Eight years of Google Ads, on top of tracking that reports the truth.
Everything above is doable. Doing it every week for a year, while running the business it is meant to fill, is the part that does not fit.
Most agencies will run the campaign and take your word for what a conversion is. We build the measurement first — first-party, server-side, joined back to your Google Ads account status and the LegitScript portal — and then manage the account on a signal we can both trust. It is the same reason the playbook above starts with the conversion rather than the keywords.
- Account build or rebuild, structured the way this page describes
- Conversion tracking wired to your Google Ads account status and the LegitScript portal, not to form fills
- Server-side, first-party tagging so the signal survives the browser
- Landing pages that answer the ad, one per intent
- Monthly reporting against your own numbers, not the Google column
- The search terms report worked every week, not quarterly
The first conversation is a read of what your account is actually reporting. No deck, and nothing to sign to get it.
