How to Start a Telemedicine Practice in 2026: Step by Step

Starting a telemedicine practice as a licensed clinician takes ten steps, in this order: form a professional entity you are allowed to own, hold a license in every state where your patients will be located, add telehealth to your malpractice coverage, choose asynchronous or video encounters per condition, stand up an EHR with Surescripts e-prescribing (and EPCS plus the right DEA registrations if you will prescribe controlled substances), connect pharmacies and labs that can serve every state you treat, decide between cash-pay and insurance credentialing, run a HIPAA program with business associate agreements, get LegitScript-certified so you can advertise, and only then open the storefront. The clinical pieces you already know; the slow pieces are licensure, pharmacy coverage and certification. Self-assembled, that is months of work before the first out-of-state patient. On infrastructure that already holds the provider network, pharmacy routing and compliance layer, a clinician can be live in days.

This guide is written for physicians, nurse practitioners and physician assistants. If you are a non-clinician founder, start with our founder-angled guide to how to start a virtual clinic, which covers the MSO structure you will need. This is general information, not legal or medical advice.

Key takeaways

• A licensed physician can own a telemedicine practice outright through a professional corporation or PLLC; nurse practitioners can in full-practice-authority states, and anyone taking outside non-clinician investment needs an MSO structure in corporate-practice-of-medicine states.
• Licensure follows the patient: you must be licensed (or registered, where a state offers telehealth registration) in the state where the patient is physically located at the time of the encounter, and the Interstate Medical Licensure Compact speeds that up for eligible physicians without removing it.
• Prescribing controlled substances by telemedicine runs under DEA's fourth temporary extension through December 31, 2026, requires EPCS with two-factor identity proofing under 21 CFR Part 1311, and requires a DEA registration in each state where you prescribe.
• Cash-pay is the fastest route to revenue because payer credentialing takes months; insurance billing makes sense once volume and payer mix justify it.
• Google requires LegitScript certification for telemedicine advertisers, so filing early is what sets your advertising start date, not your go-live date.

Who this is for

• Physicians, NPs and PAs deciding whether to open a telemedicine-only practice or add virtual visits to an existing one.
• Clinicians weighing whether to self-assemble an EHR, pharmacy and lab stack or launch on white-label infrastructure.
• Practice owners who want to keep their current EHR and add a telehealth service line without a rebuild.

How is a telemedicine practice different from a virtual clinic?

The words overlap, but the ownership question is different. A virtual clinic in the founder sense is a brand that buys clinical services through a management services organization. A telemedicine practice is a medical practice you own and in which you personally see patients. That changes the first three steps: you own the entity directly, your own license starts the state coverage map, and your malpractice policy is first on the risk. Everything downstream is the same stack a founder-led brand needs.

Step 1: What entity should a licensed clinician form?

Form a professional entity, not a general LLC. Most states require that a business whose purpose is practicing medicine be a professional corporation (PC) or professional limited liability company (PLLC) owned by licensed professionals. In corporate practice of medicine (CPOM) states, a non-physician cannot own shares in the entity that employs physicians or control clinical decisions. California is the usual example: a professional medical corporation there must be majority-owned by physicians licensed in California, and lay owners cannot hold shares. State rules differ on whether NPs and PAs can hold minority stakes.

Three ownership situations come up:

You are a physician. Form the PC or PLLC in your home state, obtain an EIN, open a business bank account, and get an organizational (Type 2) NPI alongside your individual NPI. Check whether each additional state requires foreign registration of the entity or its own professional entity.

You are a nurse practitioner. In full-practice-authority states you can own and run the practice. In reduced- or restricted-practice states you need a collaborating or supervising physician agreement, and some of those states require physician ownership. Scope and pay that agreement before you see the first patient.

You are taking money from non-clinicians. The moment a non-clinician holds equity, you are in MSO territory: a management company owns the brand, technology and non-clinical operations and contracts with your professional entity under a management services agreement, structured so the fee is not fee-splitting.

Have a healthcare attorney in your principal state draft the formation documents. Entity mistakes are expensive to unwind once patients and prescriptions are attached.

Step 2: Which licenses do you need, and does the IMLC help?

Licensure follows the patient. You must hold a license, or a telehealth-specific registration where a state offers one, in the state where the patient is physically located at the time of the encounter. Your own location is irrelevant. A "national" practice therefore means a license portfolio covering every state you accept patients from, plus routing that matches each patient to a clinician licensed there.

Three ways to build the portfolio:

1. State-by-state applications. Each board has its own forms, fees, verification and processing time. Budget months for a multi-state footprint.
2. The Interstate Medical Licensure Compact (IMLC). Eligible physicians (board-certified, clean disciplinary history, principal license in a member state, among other criteria) obtain a Letter of Qualification from their state of principal license and then purchase full licenses from member states on an expedited basis. It speeds the paperwork; it does not create one multi-state license, and each license still renews on its own schedule and fee. NPs and PAs have their own compacts at varying stages of implementation; check current status before relying on them.
3. A provider network that already holds the licenses. To treat patients in all 50 states on day one, see your own patients in your licensed states and route the rest to a credentialed network. MyOrbitHealth's Provider Network is 2,400+ board-certified MD, DO, NP and PA providers across all 50 states and 38+ specialties, with bring-your-own-providers supported, so your license and theirs sit in one routing table.

Watch the extras: some states require a separate telehealth registration or out-of-state permit, and most require documented telehealth consent before the first encounter. Our telehealth licensing by state guide tracks the exceptions.

Step 3: What malpractice coverage does a telemedicine practice need?

Call your carrier before your first virtual visit. Three things to confirm in writing:

• Telehealth is covered. Some policies exclude or limit it; others require a telehealth rider or endorsement. Get the modality you plan to use (asynchronous, audio-only, video) named explicitly.
• Every state you treat into is covered. Policies are often rated by state of practice. If you add states through the IMLC, add them to the policy.
• The policy type fits a new practice. Claims-made policies are cheaper early but need tail coverage if you leave; occurrence policies cost more but close cleanly. If you contract with a provider network, confirm in writing who carries coverage for network clinicians.

Keep the certificate of insurance handy; LegitScript and pharmacy partners will ask for it.

Step 4: Asynchronous or video: which modality fits each condition?

Choose per condition, not per practice. Asynchronous (store-and-forward) encounters, where the patient completes a structured intake and the clinician reviews and responds without a live session, suit high-volume, protocol-driven conditions: hair loss, many dermatology complaints, GLP-1 weight management with appropriate screening, sexual health, routine refills. Synchronous video suits conditions that need observation, history clarification or shared decision-making, and it is required by federal rule for most controlled-substance prescribing by telemedicine. Some states also restrict asynchronous prescribing for specific drug classes or require a video or audio component for an initial encounter.

The tradeoff is throughput against nuance; most practices land on asynchronous first with a video escalation path. Our async vs sync telehealth guide covers the state rules and provider economics of each.

Step 5: What EHR, e-prescribing and DEA setup does a telemedicine practice need?

Your record system needs more than a traditional EHR: adaptive intake, severity scoring, encounter notes, e-prescribing, lab orders and results, patient messaging, and an audit trail showing who touched what and when. The telehealth EHR guide explains what to look for; OrbitOS is MyOrbitHealth's version, a multi-tenant clinical console with patients, encounters, prescriptions, providers, role-based access and a full HIPAA audit trail.

E-prescribing. Non-controlled prescriptions go through a certified e-prescribing connection on the Surescripts network, which most US pharmacies sit on. Confirm your EHR or infrastructure partner supports it, including compounded medications routed to a 503A pharmacy.

EPCS. If you will ever prescribe a controlled substance (testosterone is Schedule III; several sleep and anxiety medications are Schedule IV), you need electronic prescribing of controlled substances under 21 CFR Part 1311. That means identity proofing of each prescriber, a two-factor authentication credential, and a certified or audited EPCS application. Build this in at the start rather than retrofitting it.

DEA registration per state. DEA registration is tied to a practice location, so DEA generally requires a separate registration in each state where you prescribe controlled substances, plus state controlled-substance registrations where required.

The telemedicine prescribing rule. The Ryan Haight Act generally requires an in-person evaluation before a controlled substance is prescribed. As of October 2026, DEA and HHS's fourth temporary extension of the COVID-era telemedicine flexibilities, published December 31, 2025, allows DEA-registered practitioners to prescribe Schedule II-V medications via an audio-video telemedicine encounter without a prior in-person evaluation through December 31, 2026. The permanent special-registration framework was not final at the time of writing. If your practice touches controlled substances, read the telehealth prescribing rules for 2026 and plan a 2027 contingency now. Most states also require a PDMP query before a controlled-substance prescription.

OrbitRx on MyOrbitHealth is EPCS-ready, routed via Surescripts, with two-factor identity proofing and DEA-registered partner pharmacies where applicable.

Step 6: How do pharmacy and labs connect to a telemedicine practice?

Pharmacy. A pharmacy can only ship into states where it holds a license, so a national practice needs either retail pickup or mail-order and compounding pharmacies collectively licensed in every state you treat. Compounded medications (GLP-1s, hormones, some hair-loss formulations) come from 503A compounding pharmacies filling patient-specific prescriptions. Ask every pharmacy for its state license list, its markup, its cold-chain process for injectables, and its tracking integration. OrbitRx routes to a LegitScript-certified pharmacy network (503A compounding plus retail) with cold-chain shipping to all 50 states and 0% medication markup, so pharmacy cost passes through without a margin.

Labs. Hormone therapy, weight management and primary care all need labs, drawn three ways: a walk-in order slip to a Quest Diagnostics or Labcorp patient service center, an at-home kit returned by courier, or mobile phlebotomy. Results should land in the chart, not in your inbox as PDFs. Orbit Labs supports all three (Quest and Labcorp walk-in, Tasso at-home kits via FedEx, mobile phlebotomy), with results read by the provider into the plan and a patient self-order lab catalog on the storefront where every order is signed by a provider. Lab pricing is quoted per program.

Step 7: Should a new telemedicine practice bill insurance or run cash-pay?

Start cash-pay unless your specialty makes that impossible.

Insurance credentialing typically takes months per payer, requires a CAQH profile, and ties reimbursement to codes, modifiers and place-of-service rules that vary by payer and state. Medicare adds its own layer: as of October 2026, CMS's telehealth FAQ (updated February 26, 2026) reflects that Medicare telehealth flexibilities covering patient location, including the home, run through December 31, 2027, with narrower rules scheduled to return afterward for most non-behavioral services. Private-payer coverage and payment parity vary by state.

Cash-pay removes the credentialing wait. You set a retail price, the patient pays at checkout, and subscriptions handle refills and follow-ups. Two commercial decisions matter: be the merchant of record so revenue and the customer relationship are yours, and get subscription mechanics (plan design, failed-payment recovery) right. On MyOrbitHealth your practice is merchant of record, owns its patients, records and data with export at any time, and pays a flat platform fee with no revenue share. Add insurance later for services where it pays better than retail.

Step 8: What does a HIPAA program look like for a small telemedicine practice?

A telemedicine practice is a covered entity from the first intake form. The minimum program:

• A written risk analysis that lists where PHI lives (EHR, video platform, messaging, email, billing) and what controls protect each.
• Business associate agreements with every vendor that creates, receives, maintains or transmits PHI on your behalf, with the required contract terms under 45 CFR 164.504(e). No BAA, no vendor.
• Technical safeguards: role-based access, unique user IDs, encryption in transit and at rest, audit logs, and a documented offboarding step that removes access the day someone leaves.
• Patient-facing documents: a Notice of Privacy Practices, telehealth consent, and a privacy policy that matches what your website actually does.
• Advertising pixels. Keep ad-tech trackers off pages that collect health information. The FTC Health Breach Notification Rule (16 CFR Part 318) reaches health apps and sites outside HIPAA, and both agencies have pursued pixel-related cases.

Our HIPAA for founders guide expands each item. MyOrbitHealth includes a BAA in every contract, is SOC 2 Type II, runs a HITRUST-aligned architecture, and stores PHI encrypted in US regions.

Step 9: How do you get LegitScript-certified to advertise?

Google's healthcare and medicines policy allows telemedicine providers to advertise in the United States only if they are certified through LegitScript's Healthcare Merchant Certification Program and then approved by Google. Meta and Microsoft recognize the same certification. Without it, paid search and paid social are closed, and most organic channels are slow for a new practice.

LegitScript reviews nine standards: licensure, legal compliance, disciplinary history, affiliate vetting, patient services disclosure, privacy, prescription validity, operational transparency and advertising practices. Expect to provide entity and professional licenses, DEA certificates where applicable, your privacy policy, prescribing policies, pharmacy relationships and planned advertising. As published on LegitScript's site in October 2026, there is an application fee per website plus an annual certification fee, with an optional paid expedite.

File early. Certification timing is LegitScript's decision. MyOrbitHealth prepares, files and manages the brand's application through approval; once filed, approval typically takes days rather than months, though it is never guaranteed. The LegitScript certification guide covers what reviewers look for.

Step 10: When do you open the storefront?

Last. The storefront presents the offer, collects payment, triggers intake and starts the subscription; opening it before pharmacy routing, lab panels and consent flows are tested creates patients you cannot yet serve. On MyOrbitHealth the branded storefront, checkout, subscriptions, patient portal and native white-label iOS/Android app are included, and Orbit Intake delivers the adaptive, severity-scored questionnaire with red-flag escalation under your brand. The telehealth launch checklist is the item-by-item version of this step.

How do you add telehealth to an existing practice without replacing the EHR?

Most established practices should not rebuild. Keep your EHR as the system of record for in-person care, and run the virtual service line on a telehealth layer that handles intake, routing, e-prescribing and shipping, with encounter summaries flowing back to the main chart. Settle three questions: which system is the source of truth for medication lists and allergies, how telehealth lab results reach the primary record, and whether your existing providers, a network, or both see the virtual patients.

MyOrbitHealth's clinics solution is built for that case: your EHR stays intact, your providers can join the routing table, the Provider Network covers states and hours you do not, and the REST API with signed webhooks (events such as appointment.completed and prescription.dispensed) keeps your main systems informed.

What does it cost and how long does it take?

The honest answer is qualitative, because the range depends on your state footprint, specialty and how much you self-assemble.

Self-assembled costs fall into legal (entity, consent documents, any MSA), licensure (per-state fees, IMLC, DEA registrations per state), insurance, software (EHR, e-prescribing, EPCS, video, messaging, storefront), pharmacy and lab integrations, LegitScript, and marketing. The recurring surprise is per-state fees multiplying across licenses, DEA registrations and pharmacy coverage.

Infrastructure costs collapse software, pharmacy, labs and compliance into a flat platform fee scoped at onboarding to your verticals, states and volume, with 0% medication markup, no revenue share, no exit fee and month-to-month terms after onboarding. There is no published price list; the startup cost calculator gives directional ranges.

Timeline. Self-assembled, the long poles are multi-state licensure, pharmacy coverage and LegitScript, each measured in months. On infrastructure, the provider network, pharmacy routing, labs and compliance layer already exist, so brands go live in days once onboarding starts, with your entity work and LegitScript filing setting the pace. The telehealth launch timeline shows the week-by-week sequence.

Each step, who does it

Frequently asked questions

Can a physician start a telemedicine practice alone?

Yes. A licensed physician can form a professional corporation or PLLC, hold licenses in each state they treat into, carry malpractice with a telehealth rider, and see patients by video or asynchronous review. The constraint is coverage: one clinician cannot be licensed everywhere or available at all hours, so most solo practices either limit their states or route overflow to a credentialed provider network.

Can a nurse practitioner start a telemedicine practice?

In full-practice-authority states an NP can own and operate a telemedicine practice independently. In states with reduced or restricted practice, the NP needs a collaborating or supervising physician agreement, and some of those states require physician ownership of the entity. The rules are set state by state, so check each state you plan to treat into.

Do I need a license in every state where I see patients?

Generally yes. The patient's physical location at the time of the encounter determines which state's license is required, and a few states offer a telehealth-specific registration instead of a full license. The Interstate Medical Licensure Compact speeds up applications for eligible physicians but still results in separate state licenses with separate renewals.

Can I prescribe controlled substances through telemedicine in 2026?

As of October 2026, yes under DEA's fourth temporary extension of the telemedicine flexibilities, which runs through December 31, 2026 and generally requires an audio-video encounter, EPCS, and a DEA registration in the state where you prescribe. The permanent special-registration rule was not final at the time of writing, so confirm current DEA guidance and plan for stricter requirements in 2027.

Should my telemedicine practice bill insurance?

Most new practices start cash-pay because payer credentialing takes months and telehealth reimbursement rules vary by payer and state. Insurance makes sense once you have volume in a specialty where reimbursement beats retail pricing. Medicare's telehealth flexibilities were extended through December 31, 2027 as of October 2026, which matters only if you enroll and bill Medicare.

Can I run a telemedicine practice from home?

Clinically, yes, provided your workspace is private, your connection is secure, and your documentation meets the standard of care. Administratively, check whether your state board requires a physical practice address, whether your DEA registration address can be a home office, and whether payers you enroll with have location requirements.

How do I add telehealth to my existing practice without changing my EHR?

Keep your EHR as the system of record and run the virtual service line on a telehealth layer that handles intake, routing, e-prescribing and fulfillment, sending encounter summaries back by API or webhook. Decide which system owns medication and allergy lists before launch. MyOrbitHealth's clinics solution is built for this configuration.

Sources

• DEA and HHS, Fourth Temporary Extension of COVID-19 Telemedicine Flexibilities for Prescription of Controlled Medications, 90 FR 61301 (December 31, 2025)
• 21 CFR Part 1311, Requirements for Electronic Orders and Prescriptions (EPCS)
• 45 CFR 164.504(e), Business associate contracts
• FTC Health Breach Notification Rule, 16 CFR Part 318
• CMS, Telehealth (Telehealth FAQ updated February 26, 2026)
• Google Ads Healthcare and medicines policy
• LegitScript Healthcare Merchant Certification
• Interstate Medical Licensure Compact Commission

Start your telemedicine practice on infrastructure that already exists

Bring your license and your patients; MyOrbitHealth brings the rest. 2,400+ board-certified providers across all 50 states to cover the states and hours you cannot, OrbitOS, OrbitRx with EPCS and 0% medication markup, Orbit Labs, a branded storefront and native app, and managed LegitScript certification, with a BAA in every contract and your EHR left intact if you have one. Book a demo or see how it works for existing practices adding virtual care.