Thirty Madison LegitScript and Accreditation Status

What Is Thirty Madison?

Thirty Madison is a New York-based telehealth holding company that builds separate consumer-facing brands around single medical conditions. Rather than offering a broad general-health platform, each sub-brand has its own name, website, and clinical focus. Keeps targets androgenic alopecia with finasteride and minoxidil. Cove provides migraine management with triptans and CGRP-pathway drugs. Picnic handles allergic rhinitis. Xilo addresses insomnia.

The company raised over $140 million in venture funding before a 2022 merger with Ro, another D2C telehealth company, creating one of the largest independent telehealth networks in the United States. The combined entity serves hundreds of thousands of patients across multiple therapeutic areas.

Corporate Structure and Sub-Brand Relationships

Each Thirty Madison sub-brand operates its own patient-facing website and marketing funnel, but the back-end clinical operations, electronic health record systems, and pharmacy logistics are shared across the portfolio. This matters for accreditation review because LegitScript certifies individual pharmacy entities, not parent holding companies. A parent company holding no direct LegitScript certificate does not mean its pharmacy partners are unverified, but patients must trace the specific dispensing pharmacy to confirm status.

How Prescriptions Are Filled

Depending on the sub-brand, prescriptions flow either to in-house dispensing operations or to third-party partner pharmacies. Cove, for example, has historically used third-party mail-order pharmacies rather than an in-house compounding operation. Keeps sends minoxidil and finasteride through licensed mail-order pharmacies. Patients typically see the name of the dispensing pharmacy on the prescription label, which provides the specific entity to look up on NABP or LegitScript databases.

LegitScript Certification: What It Means and Whether Thirty Madison Holds It

LegitScript is a private verification service that monitors online pharmacies and telehealth platforms for compliance with U.S. Federal and state pharmacy laws. Its certification is not a government license, but Google, Meta, and other ad platforms require it before allowing pharmacy-related advertising. The LegitScript certification standards require verified dispensing locations, licensed prescribers, and proof of a valid patient-prescriber relationship before dispensing.

A July 2025 search of the publicly available LegitScript certified merchant database returns no active listing for "Thirty Madison," "Keeps," "Cove," or "Picnic" as certified online pharmacy merchants. This does not automatically mean the company is operating illegally. LegitScript certification is voluntary. The FDA's BeSafeRx campaign and the National Association of Boards of Pharmacy (NABP) maintain separate databases of licensed and .pharmacy-credentialed online pharmacies that represent the regulatory floor for legal operation.

Checking NABP Accreditation

NABP's Digital Pharmacy accreditation (formerly VIPPS) is the gold standard for mail-order pharmacy safety in the United States. Patients can search the NABP database at nabp.pharmacy by pharmacy name or address. As of this review, the specific dispensing pharmacies contracted by Thirty Madison sub-brands are not consistently disclosed on consumer-facing product pages, making NABP verification difficult without first placing an order and identifying the pharmacy on the dispensed label.

What Absence of LegitScript Certification Actually Means

Absent LegitScript certification, the relevant question becomes whether each dispensing pharmacy holds a valid state pharmacy license in the patient's state of residence. State boards of pharmacy maintain public license lookup tools. The FDA's guidance on internet pharmacy compliance recommends verifying state licensure, requiring a valid prescription, and confirming a U.S.-based address before using any mail-order service.

The table below summarizes the verification steps a patient should take before filling a prescription through any Thirty Madison sub-brand:

| Step | Action | Where to Check | |------|--------|----------------| | 1 | Identify the dispensing pharmacy name on checkout or label | Order confirmation email | | 2 | Verify state pharmacy license | State board of pharmacy lookup | | 3 | Check NABP Digital Pharmacy status | nabp.pharmacy | | 4 | Check LegitScript status (optional but useful) | legitscript.com/pharmacies | | 5 | Confirm prescriber NPI is active | npiregistry.cms.hhs.gov |

BBB Rating and Complaint Analysis

The Better Business Bureau profile for Thirty Madison shows the company is not BBB accredited as of July 2025. BBB accreditation is voluntary and paid, so non-accreditation alone does not indicate a problematic business. The substantive signal lies in the complaint volume and resolution rate.

Complaint Categories

Across BBB filings and consumer review platforms, Thirty Madison and its sub-brands collect complaints in three main categories. Billing and subscription cancellation disputes are the most frequent, with patients reporting difficulty canceling recurring shipments or obtaining refunds after cancellation requests. Customer service response time is a secondary complaint, particularly for Cove and Keeps. A smaller subset of complaints involves clinical concerns, such as patients reporting no follow-up after reporting side effects.

The FDA's MedWatch program allows patients to report adverse drug events regardless of whether the pharmacy or telehealth provider responds. Patients experiencing side effects from finasteride, sumatriptan, or other prescription drugs dispensed through Thirty Madison sub-brands can file directly at FDA MedWatch.

Response Rate to Complaints

The BBB profile shows Thirty Madison has responded to a majority of complaints filed through that platform. A response does not equal resolution, but it suggests the company actively monitors the BBB channel. Consumer review aggregators including Trustpilot and Google show mixed ratings across sub-brands, with Keeps generally scoring higher than Cove among patients who report satisfaction with clinical outcomes.

Prescriber Licensing and the Patient-Prescriber Relationship

Federal law under the Ryan Haight Online Pharmacy Consumer Protection Act requires a valid patient-prescriber relationship before controlled substances can be prescribed via telemedicine without an in-person visit. 21 U.S.C. § 829 governs these requirements. Thirty Madison sub-brands do not primarily prescribe Schedule II or III controlled substances. Finasteride (Keeps) is not scheduled. Triptans (Cove) are not scheduled. The standard telehealth consultation model the company uses is therefore generally compliant with federal telemedicine rules for the drug classes involved.

State-by-State Prescribing Compliance

Telehealth prescribing rules vary by state. Some states require synchronous audio-video consultations before prescribing certain drug classes. Others permit asynchronous questionnaire-based prescribing for low-risk drugs. Thirty Madison's intake process is predominantly asynchronous, meaning a patient completes an online questionnaire and a clinician reviews it without a live video call. This model is permissible in most states for the drugs these sub-brands dispense, but patients in states with stricter telemedicine rules should verify compliance with their state medical board.

The Federation of State Medical Boards publishes a state-by-state telemedicine policy guide that patients and clinicians can reference.

Clinician Credentials

Thirty Madison employs or contracts licensed physicians, nurse practitioners, and physician assistants depending on the state. Prescribers must hold an active, unrestricted license in the patient's state. Patients can verify any prescriber's license through their state medical board or through the NPI Registry maintained by CMS.

Drug Safety and FDA Compliance for Thirty Madison Sub-Brands

The drugs dispensed by Thirty Madison sub-brands are FDA-approved for their labeled indications, with one important caveat for any compounded formulations.

Finasteride (Keeps)

Finasteride 1 mg is FDA-approved for male pattern hair loss under the brand name Propecia. FDA Propecia labeling includes a boxed warning regarding exposure risks in pregnant women and post-marketing reports of persistent sexual dysfunction after discontinuation, the latter known informally as post-finasteride syndrome. Keeps dispenses finasteride for male patients. Patients should review the full prescribing information, which Keeps is required to provide.

Sumatriptan and CGRP Antagonists (Cove)

Cove prescribes acute and preventive migraine therapies including sumatriptan (Imitrex) and, in some cases, newer CGRP receptor antagonists such as rimegepant (Nurtec). The American Headache Society's 2021 consensus statement published in Headache journal supports the use of gepants for both acute and preventive migraine treatment in appropriate candidates. Cove's asynchronous intake screens for cardiovascular contraindications to triptans, but patients with uncontrolled hypertension or coronary artery disease should discuss these risks explicitly with the reviewing clinician.

Compounded vs. Brand-Name Dispensing

If a Thirty Madison sub-brand dispenses a compounded formulation rather than an FDA-approved brand, the regulatory picture changes. Compounding pharmacies operate under 503A or 503B registration with the FDA. FDA 503B outsourcing facility guidance requires registered outsourcing facilities to meet current good manufacturing practice (cGMP) standards. Patients receiving a compounded product should ask whether the dispensing pharmacy is a 503A or 503B facility and request a certificate of analysis confirming potency and sterility testing.

Is Thirty Madison Legit? A Direct Clinical Assessment

The question "is Thirty Madison legit" is really asking two separate things. First, is it a legally operating company? Second, is it a high-quality clinical operation? The answers differ.

Legal Operation

Yes, Thirty Madison appears to operate legally. The company employs licensed clinicians, dispenses FDA-approved prescription drugs in the relevant drug classes, and uses partner pharmacies that hold state pharmacy licenses. No FDA warning letters addressed to Thirty Madison or its sub-brands appear in the FDA Warning Letters database as of July 2025. No FTC enforcement actions appear in publicly available records.

Clinical Quality and Oversight

Clinical quality is harder to evaluate from the outside. Thirty Madison does not publish outcomes data for any sub-brand. The company does not have Joint Commission accreditation or NCQA recognition, which are the primary quality benchmarks for outpatient health organizations. The American Telemedicine Association's practice guidelines note that telehealth providers should offer clear escalation pathways for patients who develop complications or need in-person evaluation. Whether Thirty Madison sub-brands consistently deliver on this standard is not independently verifiable from public records alone.

Patients with complex medical histories, multiple comorbidities, or prior adverse drug reactions to the relevant drug classes should consider using a telehealth provider with synchronous video consultations and explicit care coordination pathways rather than a purely asynchronous model.

What a Legitimate Accreditation Profile Would Look Like

A fully accredited D2C telehealth pharmacy would carry: active NABP Digital Pharmacy accreditation for the dispensing pharmacy, LegitScript certification, Joint Commission or URAC accreditation for the clinical operation, and transparent publication of prescriber NPI numbers on the patient portal. Thirty Madison's public-facing materials do not currently satisfy all four of these criteria. That gap does not make the company fraudulent, but it does mean patients carry more verification responsibility than they would with a fully credentialed operator.

How Patient Complaints Are Handled

Thirty Madison's formal complaint resolution channels include the BBB, state attorney general offices, and CMS for Medicare-Medicaid eligible patients (rare given the consumer demographic). Prescription drug-specific complaints can also go to the dispensing pharmacy's state board of pharmacy.

For clinical complaints, such as a prescriber failing to respond to a reported side effect, patients can file with the state medical board in the state where the prescriber holds a license. The Federation of State Medical Boards maintains a directory of all state medical boards with complaint filing links.

Billing disputes involving credit cards can be disputed directly with the card issuer under the Fair Credit Billing Act, which provides a 60-day window after the statement date on which the charge appeared.

Thirty Madison vs. Other D2C Telehealth Providers on Accreditation Metrics

Several competitor platforms carry credentials Thirty Madison currently does not. Hims and Hers, for example, has held LegitScript certification and maintains an NABP-accredited pharmacy for some fulfillment. Roman (Ro, which merged with Thirty Madison in 2022) previously carried LegitScript certification as an independent entity before the merger. Whether that certification transferred or lapsed under the combined entity is not clearly documented in public records. Patients who previously used Ro and are now routed through Thirty Madison's infrastructure should re-verify the current dispensing pharmacy's credentials rather than assuming continuity from Ro's prior status.

The NABP's internet drug outlet list of not-recommended online pharmacies does not list Thirty Madison or its sub-brands as of this review, which is a meaningful baseline: the company is not flagged as a rogue pharmacy by the primary U.S. Pharmacy safety watchdog.