Between choosing a plan and receiving a vial, a buyer agrees to something on the order of four separate documents, usually through one checkbox. They are not interchangeable and they are not enforced by the same authority. One governs whether a prescription may lawfully be written, one governs the money, one governs what happens if anything goes wrong, and one governs the data. The last two are the ones that decide the outcome of a dispute, and they are the two a buyer is least likely to have read. What counts as a lawful evaluation in the first place is a separate question, handled in the state rules article. The Sipra review separates platform agreements from clinical consent and refund conditions.
When reading the NuviaRx review and Potere Health MD review, ask which agreement governs the exact purchase. Review payment authorization, prescription changes and cancellation separately rather than treating consent to care as an answer to every billing question.
The consent to treat
This is the clinical document: an acknowledgment that care will be delivered remotely, that the person on the other end is acting as a clinician, and that certain limits follow from the format. It is governed by state professional law rather than by any federal telehealth statute, which is why its content differs from state to state and why a seller’s intake can be built one way in one jurisdiction and another way elsewhere. The Chia review contrasts advertised physician review with consent allowing other clinicians.
Two things are worth checking inside it, and neither is legal. Does it name the clinician, or a group? And does it state what happens between appointments — who answers a message about a side effect, how a dose change is authorized, whether there is a route to a person rather than a queue. A consent form describes the relationship being entered into, so a form that describes almost no relationship is itself information. The Solaya MD review distinguishes provider names across its clinical care documents. The AVArx review distinguishes messaging availability from continuous monitoring and emergency care.
The Klarity Health review separates platform access from the clinician’s fees and pharmacy bill. Check the selected provider’s policies before booking.
The HealFast review explains who provides care and who runs the platform.
The terms of service, and the clause inside it
The terms of service is a commercial contract, and the provision that matters most in it is usually the dispute-resolution clause. Federal law gives such clauses unusual force. Section 2 of the Federal Arbitration Act provides that a written arbitration provision in a contract evidencing a transaction involving commerce “shall be valid, irrevocable, and enforceable, save upon such grounds as exist at law or in equity for the revocation of any contract or as otherwise provided in chapter 4.”[1]
That closing reference is the single federal carve-out, and it is narrow. Chapter 4 provides that, at the election of the person alleging it, no predispute arbitration agreement or predispute joint-action waiver is valid or enforceable with respect to a case relating to a sexual assault dispute or sexual harassment dispute, and that whether the chapter applies is for a court rather than an arbitrator to decide.[2] Nothing in that chapter concerns a medication, a billing dispute or an injury.
An arbitration clause also rarely travels alone. The most detailed public measurement of what these clauses contain is the Consumer Financial Protection Bureau’s March 2015 study — of consumer financial products, not health care, which is the limit to hold onto. In those six markets, 85% to 100% of contracts carrying an arbitration clause also carried a provision that arbitration may not proceed on a class basis, and most of those paired it with an anti-severability provision stating that if the no-class term fell, the whole arbitration clause should fall with it.[3] The same report’s survey of 1,007 credit card holders found consumers generally unaware of whether their contracts contained such a clause, with most of those who were bound wrongly believing they could still join a class action.[3]
The billing authorization, and the rule that is not there
A recurring charge needs consent, and the federal source of that requirement is a statute rather than a regulation. The Restore Online Shoppers’ Confidence Act makes it unlawful to charge a consumer for anything sold online through a negative option feature unless the seller does three things: provides text that “clearly and conspicuously discloses all material terms of the transaction before obtaining the consumer’s billing information”; obtains “express informed consent before charging” the account; and provides “simple mechanisms for a consumer to stop recurring charges.”[4]
The regulation many readers have heard of is no longer in force. In July 2025 the Eighth Circuit, consolidating petitions from four circuits, held that the Commission’s failure to issue a preliminary regulatory analysis was fatal and concluded: “Accordingly, we grant the petitions for review and vacate the Rule.”[5] The Commission then published a final rule effective February 12, 2026 restoring the Negative Option Rule “in the form it existed before the 2024 Rule became effective,” with its name reverting to “Use of Prenotification Negative Option Plans.”[6]
What that restored rule covers is worth seeing. Its operative text concerns “the sale, offering for sale, or distribution of goods and merchandise,” and its duties are about disclosing that a subscriber must notify the seller if he does not wish to purchase the selection, about whether billing includes postage and handling, and about the subscriber being given “at least ten (10) days in which to mail any form” accompanying an announcement.[7] It is a mail-order rule from 1973. A monthly telehealth subscription is not the thing it describes. So the live federal consent duty for a recurring GLP-1 charge is the statute, not the rule — and what the exit terms themselves say is the subject of the cancellation article.
The data documents: permissions, notices and applicable rules
A privacy notice and a separate authorization answer different questions. Identify the organization, the information and the proposed use or disclosure before agreeing.[8]
Covered entities generally cannot condition care on a HIPAA authorization, with limited exceptions.[8][13] Ask which exception, if any, is being relied on. Read the authorization’s purpose, recipients and revocation terms.[8]
Do not classify an app from its brand name or the placement of its privacy policy. Identify the organization, activity and applicable notice. Ask which organization holds the clinical record and which notice explains its use.[9] A qualitative study of the commercial virtual care industry found firms valuing patient data highly, using data collected at registration to market other products and services, and in some cases funded by pharmaceutical companies to analyze interactions and adjust care pathways with the goal of increasing uptake of a drug.[10] The Enhanced review distinguishes platform policies from independent providers’ clinical privacy practices.
Whether anyone can read these at all
The evidence is not encouraging, and it comes from adjacent digital health markets rather than from GLP-1 telehealth specifically. A mixed-methods analysis of 139 user agreements from digital mental health platforms found that they required approximately 16 years of education to comprehend, and that only 1.67% of services implemented any comprehension verification for informed consent.[11] A separate study of depression app privacy policies measured a mean reading grade of 13.1 (SD 2.44) against the FDA’s recommended grade of 8; only three apps in the sample met that recommendation, and 99% contained jargon that service users had themselves identified as opaque.[12]
The finding inside that second study is the one that reverses. Privacy policies produced to satisfy the European data protection regulation — a law written to strengthen consent — “weren’t more readable and were longer.”[12] A disclosure mandate reliably produces disclosure. It does not reliably produce understanding, and the two are measured differently.
What our reviews can tell you
Our reviews summarize selected public information and link to the sources used for each assessment. They do not reproduce every clause in a provider’s agreement or establish which version applies to your treatment. A review’s revision date tells you when we updated that review; it does not promise that the provider’s documents have stayed the same since then.
If a review does not mention arbitration, a cancellation rule or a privacy provision, that omission does not establish that the provider has no such clause. Read the documents for your selected service and keep a copy of the version you accept. Start with the sources linked from the seller pages and the methodology to understand the scope of our assessments.
Use the Dr. Gillis Wellness Center review to identify the treating practice, payment authorization and consent documents before agreeing to a treatment plan.
The Teladoc Health review helps separate a program’s general terms from the prescribing benefit available to you. Check which clinical service, clinician and payment agreement apply before booking.
How to read one before you pay
Six questions, all answerable in a few minutes, none of them requiring a lawyer. Where is the dispute-resolution clause, and does it name arbitration, a class-action waiver, or a specific state’s courts? Does the billing section state the standing charge, the renewal date and the cancellation route in text you saw before entering a card, as the statute requires? Is there an opt-out window for arbitration, and how long is it? Is the entity holding your data described as a covered entity, and is there a separate privacy policy for the app or the website? Are you being asked to authorize marketing or a data sale alongside treatment? And does the clinical consent name who is responsible for follow-up?
One more piece of context belongs on any page like this. Compounded drugs are not FDA-approved and are not reviewed by the FDA for safety, efficacy or quality before they are dispensed, so the paperwork is carrying more weight here than it would for an approved product bought at a counter: it is where the obligations of both sides are actually written down. A service that will not show the terms until after payment has told you something, and it is one of the tells collected in the red-flag article.
Use the TeleSlim Clinic review to check who provides treatment, which terms govern payment and what you authorize before submitting an enrollment form.
What could not be established
No systematic study of arbitration clauses, opt-out windows or data-use terms in United States GLP-1 telehealth contracts was located, which is why the readability figures above are drawn from adjacent markets and labeled as such. The prevalence figures from the Arbitration Study describe consumer financial products and are not evidence about health care contracts. No state’s telehealth consent statute is quoted or characterized above. Nothing on this page is legal advice, and whether any particular clause binds any particular person is a question for a licensed professional in that state.