What to check before you use an online health care platform
Before you enter your medical history or payment information into any online health care platform, verify that the company is licensed, that its doctors are real, and that it protects your data. The fastest way is to check three things: whether the platform displays its medical licenses on its website, whether you can look up individual doctors in your state's medical board database, and whether the site uses HTTPS encryption (the padlock icon in your browser). If a platform won't show you these details, it is not legitimate.
Scams and unlicensed operations exist in online health care because the barrier to entry is low and enforcement is scattered across state medical boards rather than one federal agency. A platform might look professional, have good reviews, and still be operating without proper licensing. The stakes are high: unlicensed practitioners can prescribe medications that interact dangerously with your other drugs, miss serious diagnoses, or sell your personal information.
Key Takeaways
- Legitimate platforms display their medical licenses and the licenses of individual doctors, which you can verify by searching your state's medical board website.
- Check that the site uses HTTPS encryption (look for the padlock icon in your browser address bar) and has a privacy policy that explains how your data is stored and who can access it.
- Telehealth platforms regulated by the FDA, like those offering prescription medications, should disclose their regulatory status and any inspections they have undergone.
- If a platform promises cures, guarantees results, or pressures you to pay upfront for a diagnosis, it is not operating under standard medical practice.
- Your state medical board website and the National Board of Medical Examiners both offer free tools to verify that a doctor is licensed and in good standing.
How to verify a doctor's license and credentials
Every state maintains a medical board database where you can search for any doctor by name and see their license status, any disciplinary actions, and whether they are authorized to practice in that state. The National Board of Medical Examiners also runs Docboard.org, a searchable database that covers most licensed physicians in the United States. Before your first appointment, search the doctor's name in both your state's board database and Docboard to confirm the license is active and unrestricted.
Pay attention to the type of license listed. A doctor with an MD (medical doctor) or DO (doctor of osteopathic medicine) license has completed medical school and residency training. A nurse practitioner (NP) or physician assistant (PA) has different training and scope of practice — this is not necessarily a problem, but you should know what you are getting. Some platforms employ counselors or health coaches who are not licensed medical providers at all; these roles can be useful for support, but they cannot diagnose or prescribe.
If a platform lists a doctor but you cannot find that person in your state's medical board database, do not use the platform. The doctor may be using a different name, may be licensed in a different state than where they are seeing patients, or may not be licensed at all.
What to look for in the platform's privacy and data security practices
Online health care platforms handle sensitive information: your medical history, medications, diagnoses, and payment details. Before you sign up, check whether the site has a privacy policy that is easy to find and read. The policy should explain what data the platform collects, how long it keeps that data, who can access it, and whether it sells or shares your information with third parties.
Look for HIPAA compliance language in the privacy policy. HIPAA is the federal law that governs how health information is protected. If a platform handles patient data, it must comply with HIPAA or it is breaking the law. The policy should state that the platform is HIPAA-compliant and should explain what that means in plain language — for example, that your records are encrypted, that staff access is logged, and that you have the right to request a copy of your records.
Check the website's security certificate. In your browser's address bar, look for a padlock icon next to the web address. Click the padlock to see the certificate details. The site should use HTTPS encryption, which scrambles your data as it travels between your device and the platform's servers. If you see a warning that the connection is not secure, or if there is no padlock, do not enter any personal information.
Red flags that suggest a platform is not legitimate
Certain claims and practices are warning signs that a platform is not operating as a real medical service. If a platform promises to cure a disease, guarantees that a treatment will work, or claims to have a secret remedy that mainstream medicine does not offer, it is not following medical ethics or law. Real doctors describe what treatments may help and what the evidence shows; they do not may provide outcomes.
Pressure to pay upfront before a diagnosis or treatment plan is another red flag. Legitimate platforms collect payment information, but they do so after a doctor has evaluated you and recommended a course of action. If you are asked to pay a large sum before speaking to a doctor, or if the platform requires you to buy a package of services without knowing what you need, walk away.
Be skeptical of platforms that do not clearly identify who the doctors are, that use only first names, or that claim doctors are "board-certified" without saying which board certified them. Real credentials are specific and verifiable. Similarly, if a platform has no way to contact customer service, no physical address listed, or only a social media account for support, it is not a professional operation.
How to check regulatory status and inspection history
Telehealth platforms that prescribe medications or offer certain treatments may be regulated by the FDA or by state pharmacy boards. If a platform offers prescription medications, ask whether it is registered with the FDA and whether it has undergone inspection. Some platforms will volunteer this information; others will only provide it if you ask directly.
You can also contact your state's medical board or pharmacy board directly and ask whether they have records of the platform. If the platform operates in multiple states, it may be regulated by more than one board. A legitimate platform will have documentation of its regulatory status and will be willing to share it with you.
The Better Business Bureau (BBB) maintains records of complaints against businesses, including health care platforms. Search the platform's name on the BBB website to see whether there are unresolved complaints, patterns of billing problems, or other issues. A few complaints is normal for any business, but many unresolved complaints or complaints about the same problem suggest the platform has a systemic issue.
What to do if you find a problem or suspect fraud
If you discover that a platform is operating without proper licensing, is charging you without authorization, or is providing medical care that seems unsafe or unethical, report it to your state medical board. Most state boards have an online complaint form on their website. You can also report unlicensed medical practice to your state's attorney general or to the FDA if medications are involved.
If you believe you have been the victim of fraud — for example, if you were charged for services you did not receive or if your personal information was misused — report it to the Federal Trade Commission (FTC) at ReportFraud.ftc.gov. The FTC investigates health care fraud and uses reports to identify patterns and take action against bad actors.
Keep records of all communications with the platform, including emails, receipts, and screenshots of the website. These documents will help if you need to dispute a charge with your credit card company or file a complaint with a regulatory agency.
Frequently Asked Questions
Can I trust online reviews of a health care platform?
Reviews can be helpful, but they are not a substitute for checking licenses and credentials. Some platforms post fake reviews, and even real reviews reflect only the experiences of people who chose to write them. Use reviews as one data point — look for patterns about billing, wait times, or communication — but always verify the platform's licensing and the doctor's credentials independently.
What does it mean if a doctor is licensed in a different state than where I live?
Telehealth allows doctors to see patients across state lines, but the doctor must be licensed in your state or have a special interstate license. Check your state's medical board website to see whether the doctor is licensed to practice in your state. If the doctor is licensed only in another state, the platform may be operating illegally in your state.
Is it safe to use a platform that does not require a video visit?
Video visits are safer than text-only or phone-only visits because the doctor can observe you and ask follow-up questions based on what they see. Some platforms offer chat-based care for minor issues like refilling a prescription you already have, which may be acceptable. But for a new diagnosis or a complex problem, insist on a video visit so the doctor can properly evaluate you.
What should I do if a platform asks for my Social Security number?
Platforms may ask for your Social Security number for billing or insurance purposes, but they should explain why and should have a secure way to collect it. Never provide your Social Security number through email or text. If a platform asks for it in an unusual way or will not explain why, contact the platform's customer service to verify the request is legitimate before you respond.
How do I know if a platform is HIPAA-compliant?
The platform's privacy policy should state that it is HIPAA-compliant. You can also ask the platform directly and request documentation. If the platform cannot or will not confirm HIPAA compliance, assume it does not comply and do not use it for sensitive health information.