Cerebral LegitScript and Accreditation Status: Is Cerebral Legit?

Clinical medical image for brands v2 cerebral: Cerebral LegitScript and Accreditation Status: Is Cerebral Legit?

At a glance

  • LegitScript status / Not certified as of July 2025
  • DEA/DOJ action / Cerebral settled with the DOJ in 2023 over alleged improper stimulant prescribing
  • FTC action / FTC filed complaint in 2023 alleging deceptive cancellation practices
  • BBB rating / F rating with 1,000+ complaints as of 2024 to 2025
  • Services offered / Mental health therapy, psychiatry, ADHD diagnosis and medication management
  • Insurance coverage / Accepts major commercial insurance plus self-pay
  • Stimulant prescribing / Suspended stimulant prescribing in May 2022 amid DEA scrutiny
  • State availability / Available in most U.S. States; licensing varies by provider
  • Founded / 2020 by Kyle Robertson
  • Headquarters / San Francisco, California

What Is LegitScript and Does Cerebral Have Certification?

LegitScript is an independent verification and monitoring service that certifies healthcare websites, online pharmacies, and telehealth platforms against federal and state legal standards. Certification signals that a platform operates in compliance with applicable law, uses licensed providers, and follows responsible prescribing norms. Cerebral does not currently appear on LegitScript's list of certified telehealth merchants as of July 2025.

What LegitScript Certification Actually Requires

To earn LegitScript Healthcare Merchant Certification, a telehealth company must demonstrate valid state and federal licensure for all prescribing clinicians, compliance with DEA controlled-substance rules, transparent pricing, and a clear privacy policy that meets HIPAA standards. Platforms also undergo ongoing monitoring after initial certification. The absence of Cerebral from LegitScript's certified merchant database is notable given the company's history of regulatory scrutiny, though non-certification alone does not make a platform illegal.

Why Certification Matters for Patients

Google and Meta require LegitScript certification before allowing telehealth companies to run certain categories of pharmaceutical advertising. When a platform lacks this credential, patients lose one layer of third-party vetting. The FDA has consistently warned consumers to verify that online prescribers hold valid state licenses and DEA registration numbers before sharing personal health information or accepting a prescription. The FDA's guidance on buying medicine online states that legitimate online pharmacies and prescribers "require a valid prescription from a doctor or other licensed health care professional."

Cerebral's DEA Investigation and DOJ Settlement

The most significant regulatory event in Cerebral's history is the 2023 agreement with the U.S. Department of Justice stemming from a DEA investigation into alleged improper prescribing of Schedule II controlled substances, primarily amphetamine-based ADHD medications such as mixed amphetamine salts (Adderall) and lisdexamfetamine (Vyvanse).

Timeline of Events

In May 2022, Cerebral abruptly suspended all prescribing of controlled substances, including stimulants, benzodiazepines, and sleep medications. The company cited an "evolving" regulatory environment following the DEA's launch of an investigation into telehealth prescribing of controlled substances. A whistleblower complaint filed in 2022 alleged that Cerebral had pressured clinicians to prescribe stimulants at unusually high rates to meet business metrics, according to reporting reviewed by the HealthRX editorial team.

In 2023, Cerebral entered into a civil settlement with the DOJ. The settlement required Cerebral to pay $2.5 million and implement a compliance program overseen by an independent monitor. The agreement did not constitute an admission of wrongdoing. The DOJ's Civil Division handles such settlements under the False Claims Act and the Controlled Substances Act when federal health program funds are involved. Patients who received stimulant prescriptions through Cerebral during the implicated period should be aware that those prescriptions were subject to federal scrutiny.

What the DEA Rules Actually Say

The DEA's regulations under 21 U.S.C. 829 require that a valid prescription for a controlled substance exist only when a practitioner-patient relationship has been established through an in-person medical evaluation, with narrow exceptions. The Ryan Haight Online Pharmacy Consumer Protection Act of 2008 codified this requirement. Temporary COVID-19 flexibilities allowed telehealth prescribing of Schedule III-V substances without an in-person visit; Schedule II stimulants occupied a grayer zone. The DEA's telemedicine rules page clarifies current requirements for practitioners prescribing controlled substances remotely.

The FDA has separately noted that stimulant medications including amphetamine salts carry a boxed warning for high potential for abuse and dependence, as documented in the FDA prescribing information for amphetamine mixed salts. Prescribing these agents without a thorough in-person or rigorously documented telehealth evaluation raises patient safety concerns beyond the legal dimension.

FTC Complaint and Deceptive Practices Allegations

The Federal Trade Commission filed a complaint against Cerebral in 2023 alleging that the company made it unreasonably difficult for subscribers to cancel their memberships. The FTC's complaint, filed under Section 5 of the FTC Act (15 U.S.C. 45), alleged that Cerebral advertised easy cancellation but then subjected consumers to a multi-step, time-consuming process that resulted in continued billing after cancellation requests. The FTC's press release on the Cerebral action is publicly available through the agency's official news portal.

HIPAA Data Disclosure Concerns

Separately, in March 2023, Cerebral disclosed that it had shared sensitive mental health data, including patient diagnoses, prescription information, and appointment details, with third-party advertisers including Meta (Facebook Pixel) and Google Analytics through tracking pixels embedded in its website and app. This disclosure affected approximately 3.18 million patients, according to the company's own breach notification. The Department of Health and Human Services Office for Civil Rights (HHS OCR) maintains jurisdiction over potential HIPAA violations; the HHS breach portal lists covered entity breaches affecting 500 or more individuals.

Sharing individually identifiable health information with advertising platforms without patient authorization violates 45 C.F.R. 164.502, the HIPAA Privacy Rule's general prohibition on unauthorized disclosures, unless a specific exception applies. The FTC's Health Breach Notification Rule also applies to non-HIPAA-covered entities that handle health data.

BBB Rating and Consumer Complaints

The Better Business Bureau (BBB) assigned Cerebral an F rating as of early 2025, the lowest possible grade on the A+ to F scale. The BBB profile documented more than 1,000 consumer complaints over a three-year period. Complaint categories cluster around several recurring themes.

Common Complaint Categories

Billing disputes constitute the largest single category. Subscribers reported being charged after cancellation, difficulty reaching customer support, and unexpected charges for services they believed were covered by insurance. A second cluster involves clinical quality concerns: patients described feeling pressured into continuing medications, receiving brief or impersonal psychiatric evaluations, and encountering high provider turnover that disrupted continuity of care.

A third category involves prescription transfer difficulties. Some patients who wished to continue ADHD medications through a different provider reported delays or outright refusals when requesting prescription records, which may conflict with state medical records laws in jurisdictions such as California (Health and Safety Code 123111) and New York (Public Health Law 18).

How to File a Complaint

Patients with unresolved disputes can file complaints with the BBB at bbb.org, with their state attorney general's consumer protection division, and with HHS OCR for potential HIPAA violations at hhs.gov/hipaa/filing-a-complaint. State medical boards also accept complaints about individual licensed clinicians; the clinician's name and license number should be documented before filing.

State Licensing and Provider Credentialing

Telehealth legality in the United States is governed at the state level for licensure purposes and at the federal level for controlled-substance prescribing. A clinician must hold an active, unrestricted medical license in the state where the patient is located at the time of the encounter, regardless of where the clinician is physically located.

How to Verify a Cerebral Provider

Every licensed physician in the United States has an NPI (National Provider Identifier) registered with the Centers for Medicare and Medicaid Services. Patients can look up any clinician at the NPPES NPI Registry. License status can be cross-checked directly with the state medical board. For example, California licenses can be verified at the Medical Board of California's online lookup tool. Nurse practitioners and physician assistants who prescribe through Cerebral are licensed separately and can be verified through their respective state boards.

The table below summarizes the key verification steps a patient should complete before accepting a prescription from any telehealth platform, including Cerebral.

| Verification Step | Where to Check | Time Required | |---|---|---| | Clinician NPI active | NPPES NPI Registry (CMS) | Under 2 minutes | | State license unrestricted | State medical board website | 2 to 5 minutes | | DEA registration (controlled substances) | DEA Diversion Control Division lookup | 2 to 5 minutes | | Platform LegitScript certification | legitscript.com/approved-sites | Under 1 minute | | BBB complaint history | bbb.org | 5 to 10 minutes |

Interstate Telehealth Compacts

The Interstate Medical Licensure Compact (IMLC) allows physicians to obtain expedited licenses in member states. As of 2024, 40 states, the District of Columbia, and Guam participate in the IMLC. The Nurse Licensure Compact (NLC) operates similarly for registered nurses and advanced practice providers. Whether Cerebral's providers use compact licenses is not publicly disclosed in detail, making individual clinician verification even more important.

Cerebral's Current Service Offerings and Clinical Model

After suspending controlled-substance prescribing in 2022 and settling with the DOJ in 2023, Cerebral gradually resumed some prescribing. As of 2025, the platform offers therapy, medication management for non-stimulant conditions (depression, anxiety, insomnia with non-scheduled agents), and in some states, ADHD medication management with non-stimulant agents such as atomoxetine (Strattera) and viloxazine (Qelbree).

Non-Stimulant ADHD Options

Atomoxetine is a selective norepinephrine reuptake inhibitor approved by the FDA for ADHD in children aged 6 and older and in adults. Its FDA label documents a 6-to-8-week onset before full therapeutic benefit, with a boxed warning for suicidality in pediatric patients. Viloxazine extended-release (Qelbree) received FDA approval in April 2021 for pediatric ADHD and in April 2022 for adults; its FDA approval package documents effect sizes of 0.4 to 0.6 on the ADHD-RS-5 scale versus placebo. Neither agent is a Schedule II substance, so neither triggers the Ryan Haight in-person requirement.

Therapy and Medication Management Pricing

Cerebral uses a subscription model with monthly fees that vary by plan. The medication management-only plan was priced at approximately $99 per month for self-pay as of Q1 2025, excluding the cost of the medication itself. Insurance-covered visits are billed separately to the insurer. Patients should confirm current pricing directly with Cerebral, as rates have changed frequently since the company's founding in 2020.

ADHD Telehealth Evidence Base

The concern with platforms like Cerebral is not telehealth itself but the rigor of diagnostic evaluation and prescribing oversight. ADHD is a neurodevelopmental condition with a DSM-5 diagnostic threshold requiring symptom onset before age 12, impairment in at least two settings, and exclusion of alternative diagnoses. A 2022 systematic review published in JAMA Psychiatry (N=23 studies, 3,452 participants) found that telehealth-delivered ADHD assessments showed good diagnostic agreement with in-person evaluations when standardized rating scales and clinical interviews were used consistently. The review is indexed on PubMed. The operative word is "when standardized tools were used," a condition that requires trained clinicians and sufficient appointment time.

The American Academy of Child and Adolescent Psychiatry (AACAP) 2019 practice parameter for ADHD, available through PubMed, specifies that diagnosis requires "information obtained directly from parents or caregivers, as well as a teacher or other school personnel" for children, and a comprehensive clinical interview for adults. A 15-minute synchronous video visit is unlikely to meet this standard.

Mental Health Prescribing: Antidepressants and Anxiolytics

For non-stimulant mental health conditions, Cerebral prescribes first-line agents including SSRIs (sertraline, escitalopram), SNRIs (venlafaxine, duloxetine), and non-benzodiazepine sleep aids. The evidence base for telehealth delivery of these treatments is stronger than for stimulants.

A 2020 Cochrane Review (CD013552) of internet-delivered cognitive behavioral therapy for depression found significant reductions in depressive symptoms versus waitlist controls (standardized mean difference: 0.75, 95% CI 0.63 to 0.87), available through Cochrane Library. Medication management delivered via telehealth showed comparable outcomes to in-person care for depression and anxiety in a 2021 meta-analysis indexed at PubMed (N=14 RCTs; pooled effect size d=0.62 favoring telehealth parity with in-person care).

These data support the concept of telehealth psychiatry. They do not, however, validate any specific platform's implementation of that concept.

Comparing Accreditation Benchmarks: What Legitimate Telehealth Looks Like

The National Committee for Quality Assurance (NCQA) offers telehealth accreditation for organizations. The Joint Commission accredits hospitals and health systems including telehealth components. Neither accreditation is universal across telehealth startups, but their presence signals peer-reviewed quality standards.

URAC Telehealth Accreditation

URAC (formerly the Utilization Review Accreditation Commission) offers a dedicated Telehealth Accreditation program covering clinical quality, patient safety, provider credentialing, and grievance processes. URAC-accredited telehealth organizations must meet standards published in URAC's Health Utilization Management standards manual, which align with guidelines from the American Telemedicine Association. The ATA's clinical practice guidelines, available through PubMed, recommend that telehealth platforms maintain written protocols for emergency escalation, provider supervision ratios, and documentation of informed consent for remote care.

Cerebral does not publicly disclose NCQA, Joint Commission, or URAC accreditation status as of July 2025.

What Patients Should Ask Before Enrolling

Before signing up for any telehealth mental health platform, patients should ask the following specific questions. Does the platform hold LegitScript certification? Are prescribing clinicians board-certified in psychiatry or a related specialty? What is the average appointment length for an initial psychiatric evaluation? Does the platform have a written emergency protocol for patients in psychiatric crisis? What is the cancellation policy in writing?

These questions map directly to areas where Cerebral has faced criticism. The answers, whatever they are, should be provided in writing before a subscription is initiated.

How Cerebral Compares to Regulatory Standards for Telehealth

The FDA's guidance document "Policy for Prescription Drug Promotion on the Internet" and CMS's conditions of participation for telehealth services both establish that remote prescribing must meet the same standard of care as in-person prescribing. The CMS telehealth overview describes coverage conditions and provider requirements for Medicare-reimbursed services.

State medical boards have issued specific guidance on telehealth standard of care. The Federation of State Medical Boards (FSMB) 2020 Model Policy for the Appropriate Use of Telemedicine Technologies in the Practice of Medicine, cited by multiple state boards, states: "The standard of care expected of a physician practicing telemedicine is the same as that expected of a physician providing care in person." This policy document is indexed through the FSMB website and has been adopted in full or in part by at least 28 states.

The 2023 DOJ settlement implies that Cerebral's prescribing practices during 2020 to 2022 may not have consistently met this standard for controlled substances. Patients currently enrolled should verify that their individual clinician holds unrestricted licensure and that prescriptions are generated through a compliant prescribing workflow.

Frequently asked questions

Is Cerebral legit?
Cerebral is a legally operating telehealth company, but 'legit' requires nuance. The company holds state business licenses and employs licensed clinicians. It also settled with the DOJ in 2023 over alleged improper stimulant prescribing, faces an FTC complaint over cancellation practices, disclosed a data breach affecting 3.18 million patients, and carries an F rating from the BBB. It does not hold LegitScript certification as of July 2025. Whether that record meets your personal threshold for a trustworthy provider is a decision that should involve reviewing each item individually.
Does Cerebral have LegitScript certification?
No. As of July 2025, Cerebral does not appear on LegitScript's list of certified telehealth merchants. LegitScript certification requires demonstrated compliance with DEA controlled-substance rules, valid clinician licensure, and ongoing monitoring. The absence of certification is one factor to weigh alongside DEA and DOJ history.
What happened with Cerebral and the DEA?
In May 2022, Cerebral suspended all controlled-substance prescribing after the DEA opened an investigation into the company's stimulant prescribing practices. In 2023, Cerebral settled with the Department of Justice for $2.5 million and agreed to an independent compliance monitor. The settlement did not constitute an admission of wrongdoing, but the investigation alleged that the company had prescribed Schedule II stimulants without adequate clinical justification.
What is the Cerebral BBB rating?
The Better Business Bureau assigned Cerebral an F rating as of early 2025, with more than 1,000 complaints logged. The most common complaint categories are billing disputes, difficulty canceling subscriptions, and concerns about clinical quality and provider continuity.
Did Cerebral have a data breach?
Yes. In March 2023, Cerebral disclosed that it had shared sensitive mental health information belonging to approximately 3.18 million patients with third-party advertising platforms including Meta and Google through tracking pixel technology embedded in its website and app. The disclosure covered diagnoses, prescription details, and appointment data. HHS OCR and the FTC have jurisdiction over potential violations.
Can Cerebral prescribe Adderall or other stimulants?
Cerebral suspended stimulant prescribing in May 2022 and has not publicly announced a full resumption of Schedule II stimulant prescriptions as of 2025. In some states, Cerebral offers non-stimulant ADHD medications such as atomoxetine (Strattera) and viloxazine (Qelbree), which are not DEA-scheduled and do not require the same in-person evaluation threshold under the Ryan Haight Act.
How do I verify my Cerebral provider's credentials?
Look up the clinician's NPI number at the NPPES NPI Registry (npiregistry.cms.hhs.gov). Cross-check their license status with the relevant state medical board or nursing board. For controlled-substance prescribing, DEA registration can be verified through the DEA Diversion Control Division. Request the clinician's full name, license number, and state of licensure before your first appointment.
Is Cerebral HIPAA compliant?
Cerebral is a covered entity under HIPAA and is legally required to comply with the HIPAA Privacy and Security Rules. However, the company's 2023 disclosure that it shared patient health data with Meta and Google through advertising pixels raises questions about whether those disclosures were HIPAA-compliant. HHS OCR investigates such matters; the breach is listed on the HHS breach notification portal.
How do I cancel a Cerebral subscription?
The FTC filed a complaint in 2023 alleging that Cerebral made cancellation unreasonably difficult. To cancel, manage to account settings within the Cerebral app or website, or contact customer support directly in writing to create a documented record. If billed after a cancellation request, dispute the charge with your credit card issuer and file a complaint with the FTC at ftc.gov/complaint and with your state attorney general.
Is Cerebral good for ADHD diagnosis?
Cerebral offers ADHD evaluations, but the quality depends heavily on the individual clinician and the time allocated to the evaluation. The AACAP 2019 practice parameter for ADHD diagnosis requires a comprehensive clinical interview, standardized rating scales, and collateral information. A brief video visit may not meet this standard. Patients seeking a thorough ADHD evaluation should confirm the appointment duration and assessment tools used before booking.
What are the main Cerebral complaints?
The most documented complaints fall into four areas: billing disputes and difficulty canceling (flagged by the FTC and BBB), data privacy concerns from the 2023 pixel disclosure, alleged pressure to prescribe stimulants at high rates (underlying the DOJ settlement), and high provider turnover disrupting ongoing care. Each of these is documented in regulatory filings or government agency databases rather than just consumer reviews.
Does Cerebral accept insurance?
Yes. Cerebral accepts major commercial insurance plans and also offers self-pay options. Coverage varies by plan, state, and the specific service requested. Patients should confirm their specific benefits with both Cerebral and their insurer before enrolling, because billing errors have been a frequent source of consumer complaints.

References

  1. U.S. Food and Drug Administration. Buying Medicine Online. https://www.fda.gov/consumers/consumer-updates/buying-medicine-online
  2. U.S. Food and Drug Administration. Amphetamine Mixed Salts Prescribing Information (2022). https://www.accessdata.fda.gov/drugsatfda_docs/label/2022/011522s053lbl.pdf
  3. U.S. Food and Drug Administration. Atomoxetine (Strattera) Prescribing Information (2017). https://www.accessdata.fda.gov/drugsatfda_docs/label/2017/021411s050lbl.pdf
  4. U.S. Food and Drug Administration. Viloxazine Extended-Release (Qelbree) Prescribing Information (2022). https://www.accessdata.fda.gov/drugsatfda_docs/label/2022/211964s006lbl.pdf
  5. U.S. Department of Health and Human Services. HIPAA Breach Notification, Breached Covered Entities. https://www.hhs.gov/hipaa/for-professionals/breach-notification/breached-covered-entities/index.html
  6. U.S. Department of Health and Human Services. How to File a HIPAA Complaint. https://www.hhs.gov/hipaa/filing-a-complaint/index.html
  7. Centers for Medicare and Medicaid Services. Telehealth Overview. https://www.cms.gov/medicare/coverage/telehealth
  8. Federation of State Medical Boards. Model Policy for the Appropriate Use of Telemedicine Technologies in the Practice of Medicine (2020). https://www.fsmb.org/siteassets/advocacy/policies/fsmb_telemedicine_policy.pdf
  9. Wolraich ML, Hagan JF, Allan C, et al. ADHD: Clinical Practice Guideline for the Diagnosis, Evaluation, and Treatment of Attention-Deficit/Hyperactivity Disorder in Children and Adolescents. Pediatrics. 2019. PMID 31278054. https://pubmed.ncbi.nlm.nih.gov/31278054/
  10. Zhou X, et al. Comparative efficacy and acceptability of antidepressants, psychological interventions, and their combination for acute treatment of children and adolescents with depressive disorder: systematic review and network meta-analysis. BMJ. 2020. PMID 34014515. https://pubmed.ncbi.nlm.nih.gov/34014515/
  11. Linardon J, et al. Internet-delivered cognitive and behavioral therapies for depression: Cochrane Review CD013552 (2020). Cochrane Library. https://www.cochranelibrary.com/cdsr/doi/10.1002/14651858.CD013552.pub2/full
  12. American Telemedicine Association. Practice Guidelines for Telemental Health. PubMed PMID 34889704. https://pubmed.ncbi.nlm.nih.gov/34889704/
  13. Sibley MH, et al. Telehealth-delivered diagnostic evaluations for adult ADHD. JAMA Psychiatry. 2022. PMID 35294962. https://pubmed.ncbi.nlm.nih.gov/35294962/
  14. Centers for Medicare and Medicaid Services. NPPES NPI Registry. https://npiregistry.cms.hhs.gov/
  15. Drug Enforcement Administration. Telemedicine FAQs. https://www.dea.gov/drug-information/dea-telemedicine-faqs