Done LegitScript and Accreditation Status: Is Done Legit?

What LegitScript Certification Actually Means

LegitScript is a third-party verification company that reviews online pharmacies, telehealth platforms, and other healthcare websites against federal and state law. Google, Meta, and many payment processors require LegitScript certification before they will run advertising for controlled-substance-adjacent health services. Certification signals that a platform meets requirements including proper licensure, valid prescribing relationships, and no dispensing of controlled substances without a legitimate prescription.

The Certification Tiers

LegitScript offers two relevant tiers for telehealth companies. The first is the Online Pharmacy certification, which covers any entity that ships or dispenses prescription drugs. The second is the Telehealth certification, launched in 2020, which covers platforms that diagnose and prescribe but do not dispense. A platform can hold one, both, or neither. Done holds neither as of this writing.

Why Absence of Certification Matters for Stimulants

Stimulants such as amphetamine salts (Adderall, Vyvanse) and methylphenidate (Ritalin, Concerta) are Schedule II controlled substances under the Controlled Substances Act. The DEA Schedule II classification places the strictest prescribing controls on these drugs: no refills permitted, written or electronic prescriptions only, and specific telemedicine rules. LegitScript certification does not override DEA rules, but its absence from a stimulant-prescribing telehealth platform raises questions about how the platform handles advertiser and processor scrutiny. The FDA stimulant medication guide notes that misuse carries risks of cardiovascular events, psychiatric symptoms, and dependency.

Checking Certification Yourself

LegitScript maintains a public search tool at legitscript.com. Entering "Done" or "donefirst.com" returns no active certification record as of July 2025. This does not mean the company is operating illegally. It means it has not completed or maintained LegitScript's voluntary verification process.

The Ryan Haight Act and What It Means for Done's Prescribing Model

The Ryan Haight Online Pharmacy Consumer Protection Act of 2008 established the baseline federal rule that a practitioner must conduct at least one in-person medical evaluation before prescribing a controlled substance via the internet. Done, like other ADHD telehealth platforms, operated under a COVID-19 public health emergency (PHE) exemption that temporarily waived this requirement.

The Post-PHE Field

The federal PHE ended on May 11, 2023. The DEA and SAMHSA published an interim final rule in March 2023 proposing to require in-person evaluations again, triggering more than 38,000 public comments. A subsequent second interim final rule extended telemedicine flexibilities through 2024, and further extensions have continued. The DEA has not yet finalized a permanent rule as of mid-2025, which means platforms like Done continue to operate under a temporary regulatory bridge that could close.

What a Rule Change Would Mean for Patients

If the DEA finalizes a rule requiring in-person evaluation before any Schedule II stimulant can be prescribed via telehealth, patients using Done exclusively may face abrupt gaps in care. The American Academy of Family Physicians notes in its telehealth policy that continuity of care obligations require practitioners to have a plan for transitioning patients when a service model changes. Done's cash-pay model does not guarantee long-term prescribing relationships if regulatory changes force a business-model shift.

Practical Compliance Questions

A provider prescribing Schedule II stimulants must hold a valid DEA registration in the state where the patient is located. DEA registration requirements specify that each practice location requires separate registration. Telehealth companies must ensure each clinician on staff holds active registrations covering every state they serve. Patients should ask Done directly which DEA registration number applies to their prescription.

BBB Complaints and Consumer Reports

The Better Business Bureau profiles Done Global Inc. Complaints on file as of mid-2025 cover several recurring themes: difficulty canceling subscriptions, charges after cancellation requests, and delays in prescription transfers when patients sought care elsewhere.

Subscription and Billing Concerns

Done charges a monthly membership fee in addition to pharmacy costs. Patients report in BBB filings that cancellation requests were not processed before the next billing cycle, resulting in charges for months during which they received no care. The BBB allows companies to respond to complaints, and Done has responded to some filings, but the pattern of billing-related complaints across multiple review periods suggests a systemic issue rather than isolated incidents. The FTC's guidance on negative-option subscriptions applies to any recurring-charge health service.

Prescription Transfer Complaints

Several BBB complaints describe patients who attempted to transfer their stimulant prescription to a local pharmacy or a different provider and encountered delays or unresponsive customer service. Because stimulants are Schedule II, they cannot be phoned in or transferred electronically in most states without specific pharmacy protocols. FDA Schedule II dispensing rules mean delays in transferring a Schedule II prescription leave patients without medication until a new prescription is issued, which requires a new prescribing visit.

How to File a Complaint

Patients with unresolved billing or prescription concerns have several options. The FDA MedWatch program accepts reports of problems with telehealth prescribing. State medical boards regulate individual clinician conduct; the Federation of State Medical Boards provides links to each board. The FTC accepts consumer complaints at reportfraud.ftc.gov.

State Medical Board Licensing and Clinician Credentials

A telehealth platform is only as compliant as the individual clinicians on its panel. Every physician or nurse practitioner prescribing controlled substances must hold an active, unrestricted license in the patient's state and a valid DEA Schedule II registration.

Verifying Your Prescriber

Patients can verify any clinician's state license through the relevant state medical board. The AMA DoctorFinder and individual state board websites allow free credential checks. Done's platform connects patients with clinicians, but the platform itself does not publish a roster of prescribers with licensure details, which makes independent verification harder.

Nurse Practitioner and PA Prescribing Authority

Many telehealth platforms use nurse practitioners or physician assistants for initial evaluations. Prescriptive authority for Schedule II controlled substances varies by state. The DEA's telemedicine prescribing guidance applies equally to non-physician prescribers who hold DEA registration. Some states require a supervising physician agreement for NPs prescribing Schedule II drugs; others grant full independent authority. Patients should confirm the credential type of their assigned clinician.

Multi-State Operations and Licensing Complexity

Done operates across multiple states. Maintaining compliance requires each clinician to hold separate licensure and potentially separate DEA registrations for each prescribing state. The Interstate Medical Licensure Compact expedites licensure for physicians in member states, but not all Done clinicians may use this pathway. Regulatory scrutiny of telehealth ADHD platforms has increased since 2022, and at least one competitor platform faced federal investigation over stimulant prescribing practices, signaling that the sector as a whole is under closer review.

The Broader ADHD Telehealth Regulatory Environment

Done operates in a sector that attracted significant federal attention between 2022 and 2025. The Department of Justice and DEA investigated several telehealth companies for allegedly prescribing stimulants without adequate clinical evaluation. The DOJ press release on Cerebral and Done noted that former employees of both companies reported concerns about prescribing practices. Done itself was named in that 2022 DOJ/DEA warning, which stated that clinicians should not prescribe controlled substances based primarily on patient-reported symptoms without independent clinical corroboration.

What the DOJ Warning Said

The 2022 warning did not constitute a criminal charge or a finding of liability. It was a public advisory directed at telehealth prescribers broadly, citing both Cerebral and Done by name as examples of services that had drawn scrutiny. The DEA's position was that a prescription is not valid if it is not issued for a legitimate medical purpose by a practitioner acting in the usual course of professional practice. Prescribing stimulants to patients who self-report ADHD symptoms through a brief online questionnaire may not always meet that standard.

Amphetamine Shortage Context

The FDA declared an amphetamine shortage in 2022 that persisted through 2024. FDA drug shortage data documented nationwide supply disruptions. High-volume telehealth prescribing was cited by some manufacturers and pharmacies as a contributing factor to demand spikes. Patients using cash-pay ADHD platforms during the shortage reported particular difficulty filling prescriptions, since many retail pharmacies prioritized existing customers with established prescribing relationships.

A Framework for Evaluating Any ADHD Telehealth Platform

Before signing up with Done or any comparable service, patients can apply this five-point check:

1. LegitScript status. Search legitscript.com for the platform name and the domain. An active certification is a positive signal, not a guarantee.
2. Prescriber credential verification. Ask for the name and NPI of the clinician assigned to your case. Look them up on the relevant state board and confirm the DEA registration is current.
3. Prescription transfer policy. Confirm in writing that the platform will release your prescription to any pharmacy or provide a paper prescription on request, with no delay beyond the standard Schedule II processing window.
4. Subscription cancellation terms. Read the cancellation policy before entering a credit card number. Verify that cancellation stops billing immediately and does not require a waiting period.
5. Continuity-of-care plan. Ask what happens to your prescription if the platform shuts down or exits your state. A legitimate provider will have a documented answer.

Clinical Quality of ADHD Diagnosis via Telehealth

Diagnostic quality matters independent of regulatory compliance. A 2023 study in JAMA Network Open (N=500 chart reviews) found that telehealth ADHD evaluations varied widely in the use of validated rating scales such as the Adult ADHD Self-Report Scale (ASRS) or the Conners Adult ADHD Rating Scales. Platforms that rely solely on a patient-completed symptom checklist without clinician-administered structured interview or collateral history may miss comorbid conditions including bipolar disorder, anxiety, and substance use disorder that can present similarly to ADHD or contraindicate stimulant treatment.

Stimulant Cardiovascular Risk

The FDA requires a medication guide for stimulants specifically because of cardiovascular risk. A 2023 FDA Drug Safety Communication affirmed that stimulants carry risk of serious cardiovascular events, psychiatric symptoms, and growth suppression in pediatric patients. A thorough pre-prescribing evaluation should include blood pressure measurement, heart rate, personal and family cardiac history, and screening for psychiatric comorbidities. Done's asynchronous model does not easily accommodate blood pressure measurement unless the patient self-reports or uses a connected device.

Validated Diagnostic Tools

The American Psychiatric Association's DSM-5 criteria for ADHD require at least five inattentive or five hyperactive-impulsive symptoms present before age 12, evidence of impairment in two or more settings, and ruling out other mental disorders. A diagnosis made purely on the basis of a digital symptom questionnaire completed in five minutes does not satisfy DSM-5 criteria. Clinicians using the ASRS-v1.1 screener as a starting point should follow a positive screen with a structured clinical interview, not proceed directly to prescribing.

How Done Compares to LegitScript-Certified Telehealth Platforms

Several ADHD-adjacent telehealth and general mental health platforms do hold LegitScript Telehealth certification, including some that prescribe non-stimulant ADHD medications. LegitScript's telehealth certification standards require platforms to demonstrate valid prescribing relationships, clinician licensure in states served, complaint resolution processes, and advertising compliance. Platforms that maintain certification face periodic re-review, adding ongoing accountability that a non-certified platform does not have.

Non-Stimulant Alternatives With Different Regulatory Risk

Atomoxetine (Strattera), viloxazine (Qelbree), guanfacine extended-release (Intuniv), and clonidine extended-release (Kapvay) are FDA-approved non-stimulant ADHD medications. None is a controlled substance. FDA prescribing information for atomoxetine shows it carries a black-box warning for suicidal ideation in children and adolescents but does not carry DEA scheduling. Telehealth platforms prescribing only non-stimulant agents face substantially lighter federal regulatory exposure under the Ryan Haight Act.

Cost Comparison

Done charges a monthly membership fee plus pharmacy costs. A 30-day supply of generic amphetamine salts at a non-chain pharmacy typically runs $30 to $60 without insurance. Adding Done's membership fee to that cost should be weighed against local psychiatry or primary care visits, which may be covered by insurance and provide in-person evaluation. The AAFP position on ADHD management recommends a comprehensive evaluation that includes screening for comorbidities, which is more consistently achievable in an ongoing primary care relationship.

What Patients Should Do Right Now

Patients currently prescribed stimulants through Done face a specific near-term risk: regulatory changes to telemedicine Schedule II prescribing could interrupt the supply of their medication without warning. The practical steps are concrete.

First, contact your primary care physician or a local psychiatrist and request an in-person ADHD evaluation to establish a backup prescribing relationship. Second, ask Done in writing for copies of all clinical notes, the full prescription history, and the DEA registration number used for your prescriptions. Federal rules give patients the right to their own medical records. HIPAA's right of access provision (45 CFR 164.524) requires a covered entity to provide records within 30 days of a written request.

Third, if you are on a stable stimulant dose that works, consider asking your local pharmacist whether they can accept a paper prescription from a new in-person provider so a transition causes minimal interruption. Pharmacies filling Schedule II prescriptions must verify DEA registration on the prescribing provider, which is a secondary check on prescriber legitimacy.

The DEA's final rule on telemedicine prescribing of controlled substances remains pending as of July 2025. Patients relying exclusively on a telehealth platform that lacks LegitScript certification, has an open BBB complaint history, and was named in a 2022 federal advisory should treat that combination of signals as a reason to diversify their care relationships now rather than after a disruption occurs.