Ecommerce OS · Online Pharmacy7 min readUpdated November 2, 2026

Meta and TikTok Ads for Online Pharmacies: Setup and Tracking

Set up Meta, TikTok and Google ads for an online pharmacy: LegitScript or NABP, platform authorization, targeting, and tracking without health data.

Nick Bonnassies, CMO at Tagada · checked against 8 sources

Article summary

TL;DR

An online pharmacy needs a certification before it can run ads: Meta accepts only LegitScript, while TikTok and Google accept LegitScript or NABP. Then each platform has its own authorization step and targeting limits. Once ads run, send purchase events from your server, with no medication, condition or health answer in the data.

Meta "requires online pharmacies and telehealth providers to be actively certified with LegitScript", then a separate authorization from Meta.
Meta and TikTok limit prescription drug ads to people 18 or older; Meta only in the US, Canada and New Zealand.
LegitScript costs $975 per website to apply and $2,150 per website per year once approved, and says certification "does not guarantee advertising approval".
In April 2024, the FTC alleged that telehealth firm Cerebral shared sensitive data on nearly 3.2 million consumers through tracking tools.
Health and wellness advertisers report that Meta restricts standard events such as Purchase on their pixel (as reported by CustomerLabs, 2025).

Want to go further? Ask

On this page

This guide is part of our playbook on the best ecommerce platform for online pharmacies. The general guide, for any business: what is server-side tracking. Whether you may advertise at all is covered on the payment side: can you advertise prescription drugs on Facebook, Google and TikTok?

Meta, Google and TikTok: the rules side by side

Each platform names its own certification and adds its own step.

	Meta	TikTok (US)	Google Ads (US)
Certification accepted	LegitScript only1	"NABP or LegitScript, or regional equivalent"2	LegitScript or NABP3
Platform step	Request authorization from Meta after certification1	Proof of certification; for prescription drugs, proof of approval by the relevant authority2	"Advertisers must also be certified with Google"3
Age	18+ for prescription drugs1	"audiences aged 18 years or older"2	Not covered in this policy
Countries	United States, Canada or New Zealand1	Prescription medicine "Not allowed" in many markets2	Country by country3
Copy and pages	Reviewed with the ad	Reviewed with the ad	Restricts prescription drug terms in "ads, landing pages, and keywords"3

Fig. 1One certified website, three platform checks

Your certified websiteEach platform adds its own step

MetaLegitScript only · request authorization from Meta
TikTok (US)NABP or LegitScript · proof of certification
Google Ads (US)LegitScript or NABP · certified with Google

NABP alone does not open Meta.

Meta Advertising Standards; TikTok Ads policy, September 2026; Google Ads policy, Healthcare and medicines.

Watch out

NABP accreditation alone does not open Meta. If Meta is your main channel, plan for LegitScript.

Setup in 6 steps

Get certified. LegitScript for Meta; LegitScript or NABP for Google and TikTok. Certification covers the website you apply with.
Request platform access. Ask Meta for authorization, apply for Google's certification, and prepare TikTok's proof of certification.
Set targeting limits. 18+ and eligible countries on every ad set that mentions prescription drugs1 2.
Align ad copy and landing pages with each policy before you submit.
Set up server-side tracking that sends orders without health data.
Reconcile platform-reported purchases with your orders every week.

Run the steps in this order.

Run the steps in this order. A campaign built before step 2 is rejected, and tracking built before step 5 often leaks data you cannot pull back.

Certification: what LegitScript costs and covers

LegitScript is the certification Meta names, so most online pharmacies start there.

Item	What LegitScript publishes4
Who can apply	Online, retail, mail-order and compounding pharmacies, among others
Application fee	$975 per website, non-refundable
Annual certification	$2,150 per website, due only after approval
Advertising	"Eligibility to advertise on participating platforms such as Google, Meta, Netflix, LinkedIn, TikTok, and Microsoft Bing"
Limit	"it does not guarantee advertising approval"

$975

LegitScript application fee per website, non-refundable

$2,150

LegitScript annual certification per website, due only after approval

18+

Audience age for prescription drug ads on Meta and TikTok

Each website is certified separately. A second storefront or domain means a second application. Requirements in detail: online pharmacy merchant account compliance.

Ad copy and landing pages

Platforms review the page your ad sends people to, not only the ad.

No health outcome claims
In ads or on the landing page.
No “no prescription needed”
Wording, anywhere.
Check drug names against Google's policy
It restricts prescription drug terms in ads, landing pages and keywords3.
Make the landing page match the certified website
The domain in the ad should be the one you certified.
Show the prescription requirement, licenses and pharmacist contact
On the landing page.

Page structure: landing pages for online pharmacies.

Tracking without health data

Ad platforms need to know a purchase happened. They do not need to know what was bought or why.

Send	Never send
Event "purchase" with order value and currency	Medication name, dosage or product category
Hashed email or phone, with consent	Intake answers, conditions, prescription details
Order ID	Page URLs or query strings that name a condition or medication
Generic product ID	Event names that describe a condition

Fig. 2The purchase leaves your server, the health data doesn't

approved declined or closed routing step

CheckoutOrder placed
sends toYour serverDrops medication, intake answers and condition URLs
forwardsMeta, TikTok, GooglePurchase, value, currency, order ID, hashed email with consentApproved

You choose each field before it leaves your server.

From the Send / Never send table above.

Example

The FTC's April 2024 action against telehealth firm Cerebral alleged it gave sensitive information of nearly 3.2 million consumers to third parties such as LinkedIn, Snapchat and TikTok through tracking tools on its website and apps5. The proposed order banned it from sharing health information for most advertising purposes.

Server-side events give you control: you choose each field before it leaves your server. Setup: server-side tracking for online pharmacies. Tagada Rx keeps intake data out of its own storage and uses "content-free" emails7.

Health and wellness event restrictions on Meta

Meta does not publish a public help page we could cite on this. What advertisers report:

Standard events such as AddToCart and Purchase can be restricted on accounts Meta classifies as health and wellness, as reported by CustomerLabs6.
Sensitive URLs and query parameters are filtered first, in the same report6.
Restrictions show in Events Manager, with alerts on the account.

What to do: optimize on the events still available, keep URLs free of health terms, and measure sales from your own order data. Do not rename events to get around a restriction: the goal is to send less health data, not to hide it.

What to measure

Metric	Source	Why
Orders, authorized and captured	Your back office	The ground truth
Purchases reported by each platform	Meta, TikTok, Google	Compare with orders weekly
Cost per order	Spend ÷ your orders	Not the platform's own figure
Approval rate after review	Pharmacy system	An ad that brings ineligible patients costs twice
Refill rate by campaign	Subscriptions	The campaign that brings refills wins over time

Attribution in detail: ad attribution for online pharmacies.

How Tagada helps

LegitScript included, plus server-side events for your ads

For prescription brands, Tagada Rx provides "storefront, doctors, pharmacy and payments in one stack", with "Payments and LegitScript included"8. You bring the brand and the ads. Tagada Rx is open by application; details are on the Tagada Rx page.

Around it, the Tagada checkout adds:

Server-side events to Meta, Google and TikTok from the checkout
One-click upsells, order bumps and A/B tests on landing and checkout pages
Subscriptions that renew without new ad spend

Apply to Tagada Rx

LegitScript included, plus server-side events for your ads

Updated on November 2, 2026

Nick Bonnassies

CMO at Tagada

CMO at Tagada. Before Tagada, Nick built direct-to-consumer brands that generated over $115M in sales, raised over $25M in crowdfunding and sold two of them. He also works as a fractional CMO on marketing operations and AI systems.

Frequently asked questions

Does Meta require LegitScript for online pharmacy ads?

Yes. Meta "requires online pharmacies and telehealth providers to be actively certified with LegitScript". NABP accreditation is not mentioned. After certification, you must request authorization from Meta, target people 18 or older, and only in the United States, Canada or New Zealand.

How much does LegitScript certification cost?

LegitScript publishes a $975 application fee per website, non-refundable, and $2,150 per website per year for certification, due only after approval. It does not guarantee advertising approval: each platform still reviews you.

Can an online pharmacy advertise on TikTok?

In the US, TikTok may allow online pharmacy ads with proof of certification from NABP, LegitScript or a regional equivalent. Prescription drug ads also need proof of approval by the relevant authority and an 18+ audience. Many other markets do not allow prescription medicine ads at all.

Is the Meta pixel HIPAA compliant?

The pixel is a tool; what matters is the data you send. Keep medication names, conditions, intake answers and health-related URLs out of every event. The FTC's Cerebral case shows the risk of sharing health data through tracking tools. Server-side events let you control each field.

What are Meta's health and wellness restrictions?

Meta can restrict how health and wellness advertisers share event data. Advertisers report restricted standard events such as Purchase and filtered URLs, as reported by CustomerLabs. Check Events Manager for alerts, optimize on available events and measure sales from your own orders.

Sources

Checked November 2, 2026

Tagada Rx

Get pharmacy ads approved and count sales without health data

Tagada Rx runs the stack behind your brand. Open by selection: every application is reviewed, and we reply to each one.

Apply to Tagada Rx

01Tell us about your brand
02We review every application
03Go live under your brand after review