GLP-1 Ads: What Google and Meta Allow in Late 2026
Google and Meta both tightened GLP-1 ad policies through 2026. The current rules, what changed, and how compliant clinics keep campaigns running.
In the US, Google Ads lets advertisers name prescription GLP-1 drugs such as semaglutide or tirzepatide in ads and landing pages, but only certified advertisers can use them as keywords, and telemedicine providers and online pharmacies must be certified, with LegitScript accreditation. Meta requires LegitScript certification and its own authorization for telehealth providers and online pharmacies promoting prescription drugs, and requires targeting people 18 or older. Curve Compliance keeps protected health information away from both platforms, sending GLP-1 conversions server-side to Google Ads and Meta with neutral event names such as "Lead" in place of drug or condition names.
If Meta rejected a GLP-1 ad, see Meta rejected our telehealth ad for promoting prescription drugs.
As of 2026, both Google and Meta permit GLP-1 advertising from properly certified clinics and telehealth providers. The certification rules are not new; what has grown is scrutiny of weight loss claims, compounded drugs and misleading testimonials. If you run paid campaigns for a GLP-1 clinic or telehealth brand, the rules below govern what you can actually launch today.
If Meta, Google or TikTok has restricted your account or events, Ad Account Rescue explains what each notice means and the compliant way forward.
Book a call. Running GLP-1 or tirzepatide ads on Google or Meta and not sure what your landing pages send to each platform? Book a call with Curve.
TL;DR
- In the US, Google allows prescription drug terms such as semaglutide, tirzepatide or their brand names in ads and landing pages, but only certified advertisers can target them as keywords, and online pharmacies, telemedicine providers and manufacturers must be certified.
- Meta requires prescription drug and weight loss ads to target people 18 or older, requires LegitScript certification for online pharmacies and telehealth providers, and bars weight loss creative that attacks appearance or zooms in on pinched fat.
- Compounded GLP-1 drugs are prescription drugs that FDA has not approved, so the same certification rules apply and ads must not imply FDA approval or equivalence to brand products.
- Conversion tracking for GLP-1 campaigns must avoid transmitting protected health information (PHI) to ad platforms; server-side, PHI-stripped event delivery is the safest architecture.
- Repeated violations can lead to account restrictions or suspension on both platforms.
Policy is one side of the picture. For the strategy side, read our guide to advertising a weight loss clinic in the Ozempic era, including the common marketing mistakes to avoid.
What Changed in the Google Ads GLP-1 Rules During 2025-2026
Google's rules for GLP-1 ads come from its standard Healthcare and medicines policy and its restricted drug terms rules, which govern prescription drug keywords, online pharmacies and telemedicine.
LegitScript Accreditation and Google Certification
Google allows telemedicine providers that facilitate prescribing if they are accredited by LegitScript's Healthcare Merchant Certification Program, and online pharmacies if they are accredited by LegitScript or NABP. Advertisers must also be certified with Google.
Keyword and Ad Copy Restrictions
In the US, prescription drug names, brand or generic, may appear in ads and landing pages, but only certified advertisers can use them as keywords. Uncertified clinics should build keyword lists around consultations and programs.
Landing Page Requirements
Good practice for GLP-1 landing pages is to identify the licensed prescriber, state that the medication requires a prescription, and avoid promising specific results. Google's misrepresentation policy also requires clear disclosure of costs before purchase. For more detail on building compliant pages that still convert, see our guide on GLP-1 Clinic Google Ads: HIPAA-Compliant Weight Loss Campaign Strategies That Convert.
Meta GLP-1 Ads Policy: Current State
Meta also relies on LegitScript: its prescription drug policy requires online pharmacies and telehealth providers to be actively certified, limits these ads to the United States, Canada and New Zealand, and requires a disclaimer to consult a licensed health professional. Health is not a Meta Special Ad Category, and no GLP-1-specific Meta rule has been published.
Audience and Targeting Limits
All GLP-1 ads on Meta platforms must target people 18 or older, under both the prescription drug and weight loss rules. Meta removed health-related detailed targeting options in January 2022. Advertisers cannot use Custom Audiences built from website pixel events that indicate a user sought weight-loss treatment, because this constitutes health-condition targeting and risks transmitting PHI to Meta's systems.
Creative Restrictions
Meta's weight loss rules bar statements that attack a person's appearance, close-ups pinching fat, and sensational promises of specific outcomes within a set timeframe (such as "lose 20 pounds in 8 weeks"). The FTC separately requires disclosure of generally expected results when a testimonial shows atypical weight loss. For a full breakdown of testimonial compliance, read our piece on GLP-1 Before-and-After Advertising Rules: FTC Requirements for Weight Loss Testimonials and Results.
Compounded GLP-1 Advertising on Meta
Meta has published no compounding-specific rule, so compounded semaglutide or tirzepatide ads fall under the prescription drug policy and its LegitScript requirement. FDA declared the tirzepatide shortage resolved in December 2024 and the semaglutide shortage resolved in February 2025, and it warns that compounded GLP-1 drugs are not FDA-approved. Our companion article on GLP-1 Compounded Pharmacy Marketing: 2026 FDA Crackdown and Advertising Rules covers the regulatory side in detail.
What regulators flag in GLP-1 ads
Regulators look at the claim and the product, whatever the platform.
- Compounded drugs presented as the approved drug. The FDA's consumer red flags include a company that "makes claims such as the compounded drug is the same as an FDA-approved drug" (FDA).
- Unapproved ingredients. The FDA says it has warned telehealth companies for marketing unapproved drugs such as retatrutide, "including instances of direct marketing to consumers" (FDA).
- Hidden costs and borrowed results. In July 2025 the FTC settled with telehealth firm NextMed, alleging its advertised monthly price left out the drug, lab work and consultation, and that it used fake reviews and before-and-after photos from people who were not its clients (FTC).
GLP-1 ad rules: Google vs Meta vs TikTok
| Rule | Google Ads | Meta | TikTok |
|---|---|---|---|
| Naming semaglutide or tirzepatide | Allowed in US ads and landing pages; keyword-targeting drug terms needs certification (Google) | Only advertisers certified with LegitScript and authorized by Meta (Meta) | May be allowed with proof of approval and certification from regulators such as the FDA (TikTok) |
| Selling or prescribing online | Prescription drug services, such as telemedicine and online pharmacies, need Google certification (Google) | General telehealth ads need no written authorization if they do not promote a specific drug (Meta) | Online pharmacy ads need proof of certification from NABP, LegitScript or a regional equivalent (TikTok) |
| Audience age | Users under 18 get no personalized ads (Google) | 18 or older for prescription drug ads (Meta) and weight loss ads (Meta) | 18 or older for prescription medicine (TikTok) and weight loss claims (TikTok) |
| Weight loss claims | No claims that present an improbable result as the likely outcome (Google) | No statements of inferiority about appearance (Meta) | No exaggerated or harmful weight loss claims in ads or landing pages (TikTok) |
The HIPAA and Tracking Compliance Layer
Platform ad policies are only half the compliance picture. The other half is how you track conversions without violating HIPAA, the FTC Health Breach Notification Rule, or state laws like Washington's My Health My Data Act (MHMDA). HHS OCR's December 2022 guidance on online tracking technologies (updated in March 2024) made clear that standard client-side pixels on healthcare pages can transmit PHI (IP addresses, click IDs, page URLs containing health condition information) to advertising platforms without patient authorization.
For GLP-1 clinics, this means that a Meta pixel firing on a page titled "semaglutide-consultation-booking-confirmed" sends health information about that user to Meta. That transmission, absent a valid Business Associate Agreement (BAA) with the platform, is a HIPAA violation if the clinic is a covered entity or business associate. Google and Meta do not sign BAAs for their advertising products.
The compliant architecture is server-side conversion delivery with PHI stripping before the event reaches the ad platform. This preserves campaign optimization signals (conversion counts, values, timestamps) while removing identifiers that constitute PHI under the HIPAA Privacy Rule. Curve provides exactly this: a signed BAA, server-side event delivery to Google, Meta, and Microsoft, session-level analytics, and form tracking that never exposes PHI to third-party ad platforms.
What DTC Pharma Brands Face vs. Independent Clinics
The rules differ depending on advertiser type. Pharmaceutical manufacturers running direct-to-consumer campaigns for branded GLP-1 products must comply with FDA fair balance requirements, ISI (Important Safety Information) inclusion, and platform-specific pharma advertiser verification. Independent clinics and telehealth platforms face the LegitScript and certification requirements described above but do not carry fair balance obligations unless they name the drug in a way that triggers product-claim classification. Our guide on Direct-to-Consumer GLP-1 Brand Advertising: Pharma DTC Rules for 2026 explains the distinction in depth.
Enforcement Patterns and Account Risks
Google applies a strike system to some policies, where warnings and strikes escalate to account suspension, and it suspends accounts without warning for egregious violations. Meta can restrict ad accounts after repeated rejections.
The most common triggers for enforcement actions in 2026 are: (1) keyword-targeting prescription drug names without the required certification, (2) implying compounded formulations are FDA-approved, (3) making specific weight-loss claims without substantiation, and (4) running conversion pixels that transmit health data without proper consent mechanisms.
What to Do Now: Concrete Steps for GLP-1 Advertisers
Step 1: Verify Your LegitScript Status
Confirm your LegitScript certification type matches what you sell: telemedicine for prescribing providers, or pharmacy accreditation for dispensing. Then apply for the matching Google healthcare certification. Allow time, since LegitScript reviews can take weeks.
Step 2: Apply for Google's Healthcare Certification
Apply through Google's healthcare certification application form for your account and target country, using your LegitScript certification details.
Step 3: Audit Your Landing Pages
Ensure every GLP-1 landing page includes prescriber disclosure, pricing transparency, and a results-vary disclaimer. Remove or gate any before-and-after imagery behind a click-through interstitial if you are driving Meta traffic to those pages.
Step 4: Replace Client-Side Pixels with Server-Side Conversion Delivery
Remove Meta Pixel and Google Ads gtag.js from any page that reveals health-condition information. Replace with a server-side integration that strips PHI before sending conversion events. This protects you under HIPAA, MHMDA, and the FTC Health Breach Notification Rule simultaneously.
Step 5: Restructure Meta Audiences
Eliminate any Custom Audiences built from health-condition page visits. Switch to broad targeting with algorithm optimization or use first-party CRM lists that have been de-identified and consented for advertising use.
Step 6: Document Everything
Maintain a compliance file for each campaign containing: your LegitScript certificate, Google certification confirmation, pharmacy source documentation, ad creative approvals, landing page screenshots with timestamps, and your tracking architecture diagram. If an account review occurs, having this documentation readily available shortens the resolution window significantly.
For advertisers ready to scale once compliance is locked in, our guide on Google Ads for GLP-1 Clinics: Weight Loss Campaign Optimization and Scaling covers bid strategies, audience segmentation, and budget allocation for compliant campaigns.
How Curve Fits Into This Stack
If you are running GLP-1 advertising on Google or Meta and need conversion tracking that does not put your practice at regulatory risk, Curve provides HIPAA-compliant analytics with a signed BAA, server-side conversion delivery that strips PHI before events reach ad platforms, HIPAA-safe session replay, form analytics, and full funnel visibility. The platform is purpose-built for healthcare marketers who need optimization data without the compliance exposure that standard pixels create.
Frequently Asked Questions
Can I still run Google Ads for my GLP-1 clinic in 2026?
Yes. In the US you may mention prescription drugs such as semaglutide, Ozempic or Zepbound in ads and landing pages, but you need Google certification to use them as keywords, and telemedicine providers need certification, which requires LegitScript accreditation. Without it, target consultation and program keywords.
Does Meta allow before-and-after photos in GLP-1 ads?
Meta's policy does not ban them outright, but it bars weight loss creative that attacks a person's appearance, zooms in on pinched fat, or promises specific outcomes within a set timeframe, and the ad must target people 18 or older. Results shown must also be typical or carry an FTC-compliant disclosure, and each patient pictured needs a written HIPAA authorization.
Is it legal to advertise compounded semaglutide on Google or Meta?
Neither platform has published a compounding-specific rule, so compounded GLP-1 ads fall under the prescription drug certification rules. FDA declared the tirzepatide and semaglutide shortages resolved in December 2024 and February 2025, warns that compounded GLP-1 drugs are not FDA-approved, and has sent warning letters to sellers, so this is a high-risk category.
Do I need a BAA with Google or Meta to run GLP-1 ads?
Google and Meta do not sign BAAs for their advertising products. This means you cannot send them data that qualifies as PHI under the HIPAA Privacy Rule. The compliant approach is to use server-side conversion tracking that strips PHI (IP addresses, health-indicating URLs, identifiers linked to health conditions) before the event reaches the ad platform.
What happens if my GLP-1 ad gets disapproved on Google?
A single disapproval can be appealed through Google's policy review process. However, for policies under Google's strike system, a warning is followed by strikes that lead to account suspension, and egregious violations can suspend an account immediately. Address disapprovals immediately and document your compliance measures before resubmitting.
How do I track GLP-1 ad conversions without violating HIPAA?
Use a server-side conversion tracking platform that holds a signed BAA with your organization and strips all PHI before delivering conversion events to ad platforms. This preserves optimization signals (conversion counts, timestamps, values) while removing the identifiers that create HIPAA liability. Platforms like Curve are designed specifically for this use case in healthcare marketing.
How do I keep drug names like semaglutide out of the conversion events Google and Meta receive?
Drug names usually leak through page URLs and event names, such as a pixel firing on a "semaglutide-consultation-booking-confirmed" page. Remove the Meta Pixel and gtag.js from those pages and send conversions server-side. Curve Compliance uses neutral event names such as "Lead", flags PHI-like patterns such as condition names in URLs, and its free website scan lists the pixels already on a page.
Can I use Ozempic or Wegovy as a Google Ads keyword?
Only as a certified advertiser. Google allows prescription drug terms in ads and landing pages in the US, Canada and New Zealand without certification, but says "you must be certified in order to keyword-target these terms" (Google Restricted drug terms).
What does Meta require from a GLP-1 ad account?
For ads that promote prescription drugs: active LegitScript certification, authorization from Meta, targeting limited to the United States, Canada or New Zealand where you are certified, and people 18 or older (Meta Drugs and Pharmaceuticals policy).
Can GLP-1 ads run on Pinterest?
Only for approved healthcare advertisers in the US and Canada who promote prescription GLP-1 medication; Pinterest bars weight loss language and imagery for everyone else, and bars before-and-after weight-loss imagery for all advertisers (Pinterest Advertising Guidelines). See Pinterest disapproved our weight loss or telehealth ad.
Sources
Primary sources for the platform rules and laws on this page, checked October 6, 2026:
Related articles
- GuideHIPAA-Compliant Conversion Tracking Setup: Step-by-Step for Google, Meta, and Microsoft Ads
- GuideMeta Ads for GLP-1 Clinics: Targeting and Creative
- GuideMeta and Google Disagree: Reconcile Conversions with AI
- GuideED Treatment Advertising: How to Run Compliant Campaigns Across Google, Meta, and TikTok
Check your own site
See if your website is at risk. Enter your domain to scan it for tracking scripts that can expose patient data.
Stay Compliant. Scale Confidently.
Curve's team sets up HIPAA-compliant ad tracking for you, and most customers are live in about a week.
Book a free tracking audit