Knowing how to choose a white label telehealth partner comes down to scoring vendors on twelve things and refusing to be distracted by the demo: provider network and credentialing, state coverage, pharmacy routing and markup policy, labs, compliance structure (MSO and corporate practice of medicine), LegitScript support, fee model, ownership terms (patients, data, merchant of record, exit), API and SDK, storefront and app, reporting, and launch timeline plus references. A vendor that scores well on all twelve is a telehealth infrastructure partner. One that scores well on three or four and talks fast about the rest is a software subscription with a medical problem attached.
The checklist matters because a white label telehealth platform is not a SaaS tool you swap out in a weekend. It sits between your brand and licensed providers, pharmacies, labs, and regulators, and switching means re-papering the clinical entity and moving patients. This guide gives you the criteria, a weighted scoring table, the red flags, and the questions to ask on a demo. This is general information, not legal or medical advice.
Key takeaways
- Twelve criteria decide a white-label telehealth vendor: network, state coverage, pharmacy, labs, compliance structure, LegitScript, fee model, ownership terms, API, storefront and app, reporting, and launch timeline with references.
- Ownership terms (who is merchant of record, who owns patients and data, and whether there is an exit fee) matter more than headline price, because they determine what you can take with you if the relationship ends.
- Medication markup and revenue share are the two fee-model clauses that silently move brand margins the most, so ask for both in writing before comparing platform fees.
- A vendor that cannot explain how its clinical entity satisfies corporate practice of medicine rules in your launch states is transferring legal risk to you, whatever the contract says.
- Verify every claim with a document: the credentialing policy, the SOC 2 Type II report under NDA, the BAA, the pharmacy license list by state, and two live customer references.
How to choose a white label telehealth partner: the 12 criteria
1. Provider network scale and credentialing
Ask how many providers are on the network, how many actively take encounters, and the average response time during business hours. Then ask how they are credentialed: primary-source verification of licenses and board certification, with ongoing exclusion screening against the OIG and SAM lists (monthly is a reasonable bar). A vendor that credentials once at onboarding and never re-screens is a liability waiting for a patient complaint. Ask for the credentialing policy document, not a slide.
2. State coverage
"All 50 states" is a claim most vendors make. Verify it in three layers: provider licensure, clinical entity registration, and pharmacy licensure for the products you sell, each per state. A network can have a provider licensed in Alaska but no pharmacy able to ship compounded medication there. Ask for the coverage matrix by state and product.
3. Pharmacy routing and markup policy
Two questions. First, how does a prescription reach a pharmacy? Look for EPCS-ready e-prescribing (with two-factor identity proofing for controlled substances) routed through Surescripts or equivalent into a network of pharmacies whose licenses cover your states, with routing that picks the right pharmacy per order. Second, does the platform mark up medication? Some vendors sell platform fees cheap and earn on every vial; 0% markup in writing is the bar. Also ask whether the pharmacies are LegitScript-certified and whether the network includes both 503A compounding and retail.
4. Labs
GLP-1, TRT, HRT, and longevity programs all depend on labs. Ask whether the platform orders provider-directed labs, how the draw happens, and whether results flow into the encounter so the provider reads them in the plan rather than an emailed PDF. The three draw modalities to ask about are walk-in orders at Quest or Labcorp, at-home collection kits, and mobile phlebotomy. A patient self-order lab catalog on the storefront is a bonus.
5. Compliance structure: MSO and corporate practice of medicine
This is the criterion founders most often skip and most regret. The corporate practice of medicine doctrine, enforced in different forms by many states and strictly in states such as California, Texas, and New York, prohibits non-physicians from owning or controlling medical practices. The compliant structure is a physician-owned professional entity delivering care with a non-clinical MSO providing administrative services. Ask the vendor which entity employs or contracts the providers, which entity legally holds the patient relationship, and how your brand sits inside that structure. Read the MSO model guide first so you can tell a real answer from a vague one.
6. LegitScript support
As of September 2026, Google and Meta require LegitScript certification for most telehealth advertising involving prescription medication, and the application is document-heavy: corporate records, provider licensing, prescribing policies, pharmacy relationships, and privacy documentation. Ask whether the vendor merely "assists" or actually prepares, files, and manages the application through approval, and what the typical timeline has been for their brands. Any vendor promising a guaranteed approval date is overselling, because LegitScript makes the decision.
7. Fee model
Get the whole fee stack on one page: setup fee, platform fee, per-consult fee, per-prescription fee, medication markup, revenue share, app add-on, and minimums. Then model it at three volumes. A flat scoped platform fee with 0% markup and no revenue share is the simplest to model and the hardest to be surprised by. Per-consult fees are common and not inherently bad, but they need to be in the model.
8. Ownership terms: patients, data, merchant of record, exit
Four questions that belong in the contract, not the sales deck:
- Who is merchant of record? If the vendor processes payments in its name, the customer relationship is commercially theirs.
- Who owns the patient relationship and data? Your customer list, consents, and order history should be yours, exportable on request.
- Is there an exit fee or a long lock-in? Month-to-month after onboarding is achievable and worth insisting on.
- What happens to active subscriptions and prescriptions if you leave? Get the transition process in writing.
9. API, SDK, and integration surface
If you have an existing product, ask whether the platform exposes a REST API with webhooks, whether there is a front-end SDK, and whether the docs are public. Public docs signal that the API is real and maintained. If you are launching fresh you may not need the API on day one, but you will want it when you add a CRM or a second brand. Several vendors publish APIs; fewer pair one with a React SDK.
10. Storefront, checkout, subscriptions, and app
Most platforms provide a patient portal. Fewer provide a branded storefront with checkout and subscriptions, and fewer still ship a native white-label iOS and Android app under your brand. Ask what is included, what is an add-on, and whether the app is native or a wrapped web view.
11. Reporting and audit trail
Ask what you can see: encounter volumes, response times, intake-to-prescription conversion, refill rates, pharmacy turnaround. Then ask about the audit trail: a HIPAA-grade platform logs who accessed what and when, with role-based access so marketing never sees clinical notes. See the reporting screen live.
12. Launch timeline and references
Ask how long typical brands take from contract to first patient and what the brand owns on that timeline (content, design, entity paperwork, ad accounts). Then ask for two references in a similar vertical; a vendor with dozens of live brands can produce them. Be suspicious of any timeline stated as a guarantee.
How should founders score a white label telehealth platform?
Use a weighted score. Weights below reflect what tends to hurt brands most after launch; an API-first company should weight criterion 9 higher, a med spa adding virtual care lower.
| # | Criterion | Weight | What a 5 looks like | What a 1 looks like |
|---|---|---|---|---|
| 1 | Provider network and credentialing | 12% | Thousands of providers, primary-source credentialing, monthly OIG/SAM screening | Few clinicians, credentialed once, no re-screening |
| 2 | State coverage | 10% | Provider, entity, and pharmacy matrix by state and product | "All 50 states" with no matrix |
| 3 | Pharmacy routing and markup | 12% | EPCS-ready, LegitScript-certified network, 0% markup in writing | Single pharmacy, undisclosed markup |
| 4 | Labs | 6% | Provider-ordered, three draw modalities, results in the encounter | No labs or emailed PDFs |
| 5 | Compliance structure (MSO/CPOM) | 12% | Clear PC/MSO structure, BAA in every contract, SOC 2 Type II | Cannot say who employs the providers |
| 6 | LegitScript support | 6% | Prepares, files, manages through approval | "We can refer a consultant" |
| 7 | Fee model | 10% | Flat scoped fee, no revenue share, no markup | Stacked per-unit fees plus revenue share |
| 8 | Ownership terms | 12% | Brand is merchant of record, owns patients and data, no exit fee | Vendor is merchant of record, long lock-in, exit fee |
| 9 | API and SDK | 6% | Public REST API, webhooks, front-end SDK, public docs | No API or private docs |
| 10 | Storefront and app | 5% | Storefront, checkout, subscriptions, native app | Portal only, wrapped web view |
| 11 | Reporting and audit | 4% | Live dashboards, HIPAA audit trail, role-based access | Spreadsheet on request |
| 12 | Launch timeline and references | 5% | Realistic timeline, two references provided | Guaranteed dates, no references |
Score each criterion 1 to 5, multiply by weight, and sum. The final number matters less than forcing every vendor to answer every row. The best white-label telehealth platforms roundup applies this lens to the main vendors, and the compare hub has head-to-head pages for a shortlist.
What are the red flags when evaluating a telehealth vendor?
Some answers should end the evaluation, or at least send it to your attorney.
- No BAA, or a BAA offered as an upgrade. A business associate agreement is legally required for any vendor handling protected health information on your behalf, at every tier.
- A SOC 2 report offered instead of a BAA. SOC 2 Type II is a valuable independent attestation of security controls, but it does not replace HIPAA obligations. You want both.
- The vendor cannot name the clinical entity. If nobody can say which professional entity the providers practice under, the structure has not been built.
- Undisclosed medication markup or revenue share. If it is not in the fee schedule, assume it exists until you have it in writing that it does not.
- Vendor as merchant of record with no data export clause. That is a rental of your own customer base.
- Guaranteed LegitScript approval or launch dates. Neither is in the vendor's control.
- Controlled-substance prescribing treated casually. DEA has extended the telemedicine flexibilities for prescribing controlled substances through December 31, 2026, with a permanent rule still pending as of September 2026. A vendor without EPCS and identity proofing, or without a plan for when the rule changes, is not ready for TRT.
- Client names dropped freely on the sales call. If they name their other brands, they will name yours.
What questions should you ask on a demo?
Bring these and write down the answers. A vague reply counts as a 1 in the scoring table.
- How many providers were active last month, and what was the average first-response time during business hours?
- Show me the credentialing policy. How often do you re-screen against OIG and SAM?
- Which entity employs the providers, and which entity holds the patient relationship in California, Texas, and New York?
- Which pharmacies are in the network, and which states and products can each ship? Is medication markup zero, in the fee schedule?
- Show a lab order going to Quest or Labcorp, to an at-home kit, and to mobile phlebotomy, with the result landing in the encounter.
- List every fee: setup, platform, per-consult, per-prescription, app, minimums, revenue share.
- Who is merchant of record? Who owns the customer list, and how do I export it? Is there an exit fee?
- Where are the public API docs? Is there a front-end SDK? Which webhooks fire on encounter, prescription, and shipment events?
- Is the BAA in every contract? Can I see the SOC 2 Type II report under NDA?
- Do you prepare and file the LegitScript application, or advise? Can I speak to two brands in my vertical?
How does MyOrbitHealth answer the 12 criteria?
Since this is our checklist, here is our own scorecard; verify every line as you would with any vendor. MyOrbitHealth is a technology company powering 50+ digital clinics, does not practice medicine, and does not name clients.
- Network: 2,400+ board-certified providers, 38+ specialties, all 50 states, under six minutes average response during business hours, NCQA-standard primary-source credentialing with monthly OIG/SAM screening.
- Pharmacy and labs: OrbitRx, EPCS-ready with two-factor identity proofing, routed via Surescripts to a LegitScript-certified pharmacy network at 0% medication markup. Orbit Labs, provider-ordered and drawn three ways, results read into the plan.
- Compliance: HIPAA with a BAA in every contract, SOC 2 Type II (report under NDA), HITRUST-aligned architecture, and managed LegitScript certification we prepare, file, and manage through approval (typically days once filed, not guaranteed).
- Terms: flat platform fee scoped at onboarding, no revenue share, brand is merchant of record and owns patients and data, no exit fee, month-to-month after onboarding.
- Product: OrbitOS, Orbit Intake, branded storefront with subscriptions, native white-label iOS and Android app, REST API with webhooks and a React SDK, public MCP server. Brands go live in days, with no fixed day-count guarantee.
Frequently asked questions
How do you choose a white label telehealth partner?
Score every vendor on twelve criteria: provider network and credentialing, state coverage, pharmacy routing and markup, labs, compliance structure, LegitScript support, fee model, ownership terms, API and SDK, storefront and app, reporting, and launch timeline with references. Weight them for your model, insist on documents over slides, and treat missing answers as failing scores.
What is the most important criterion when evaluating a telehealth vendor?
Ownership terms, closely followed by compliance structure. Whether your brand is merchant of record, owns its patients and data, and can leave without an exit fee determines what you keep if the relationship ends. Compliance structure determines whether the business is legally sound in the first place.
Should a white label telehealth platform charge a medication markup?
It should not have to. Markup lets a vendor advertise a low platform fee while earning on every prescription, which makes your unit economics worse as you grow. Ask for 0% medication markup and no revenue share in the written fee schedule, then compare platform fees on equal footing.
Do I need a BAA with my telehealth platform?
Yes. A business associate agreement is required under HIPAA for any vendor that creates, receives, maintains, or transmits protected health information on your behalf. A SOC 2 Type II report is a useful security attestation but does not replace a BAA.
How long does it take to launch with a white label telehealth partner?
It varies by vendor and by how quickly you deliver brand assets, entity paperwork, and ad-account setup. Some platforms publish target timelines of a few weeks; MyOrbitHealth brands typically go live in days once inputs are in hand. Treat any guaranteed date with caution, since the brand controls half the inputs.
What is a telehealth infrastructure partner versus a telehealth software vendor?
A software vendor supplies the tooling and leaves providers, pharmacies, labs, compliance, and LegitScript to you. A telehealth infrastructure partner supplies the whole stack, including licensed providers under a compliant clinical structure, pharmacy and lab fulfillment, and compliance attestations, on terms where your brand owns the customer. The checklist is designed to tell the two apart.
See the checklist answered live
The fastest way to score a vendor is to make them answer the checklist live. Book a demo, bring the twelve criteria, and we will walk every row on real screens with the documents to back them.