FTC Affiliate Disclosure: This article may contain affiliate links. If you enroll through these links, a commission may be earned at no additional cost to you. This compensation does not influence the accuracy or integrity of the information presented.
MEDVi responded publicly to FDA warning letter allegations on April 9. Here's what the company said, what remains unanswered, and what it means for consumers evaluating the program. Updated April 11, 2026.
In early April 2026, MEDVi — a GLP-1 telehealth startup founded by Los Angeles entrepreneur Matthew Gallagher — became one of the most talked-about companies in American healthcare almost overnight. A New York Times profile published April 2 presented MEDVi as a potential proof-of-concept for Sam Altman's prediction that artificial intelligence could enable a single founder to build a billion-dollar company. According to verified financials reviewed by the Times, MEDVi generated $401 million in sales during 2025 and is projecting $1.8 billion in 2026 revenue — with only two full-time employees.
The story immediately went viral. Forbes, Inc., PYMNTS, and dozens of other outlets followed with their own coverage. But within 24 hours, a parallel narrative emerged — one centered on regulatory warnings, lawsuits, and questions about MEDVi's advertising practices — raising important questions that consumers searching for MEDVi information should understand before making enrollment decisions.
This report examines both sides of the MEDVi story using publicly available data, regulatory filings, and verified reporting from multiple sources.
The Growth Story: What the Numbers Actually Show
The core business thesis behind MEDVi is straightforward. Gallagher launched the company in September 2024 with $20,000 in personal capital and used AI tools — including ChatGPT, Claude, and Grok — to build the platform's website, marketing materials, customer service systems, and analytics dashboards. Rather than building clinical infrastructure, he partnered with CareValidate and OpenLoop Health, which provide licensed physicians, prescription processing, pharmacy fulfillment, and regulatory compliance.
The model allowed MEDVi to focus entirely on customer acquisition, branding, and the digital checkout experience while medical operations were handled by established telehealth infrastructure providers. According to the Times report, MEDVi attracted 300 customers in its first month, surpassed 1,000 in its second, and reached 250,000 by the end of 2025. The company's current homepage claims over 500,000 patients.
For context, Hims & Hers Health — a publicly traded telehealth company with over 2,400 employees — reported $2.4 billion in 2025 revenue with a 5.5% net profit margin. MEDVi claims a 16.2% net margin on significantly lower revenue but with essentially zero payroll overhead. Whether those margins are sustainable as the company scales and faces increasing regulatory scrutiny remains an open question.
The FDA Warning Letter: What It Says and What It Doesn't
On February 20, 2026 — six weeks before the Times profile — the FDA sent MEDVi a warning letter (Letter #721455) identifying misbranding violations on the company's website. According to the publicly available letter, the FDA found that MEDVi's site language falsely suggested MEDVi itself was the compounder of the semaglutide and tirzepatide products it sold. The agency also flagged claims that implied FDA approval or evaluation of compounded products.
It is important to note several things about this warning letter in context:
First, MEDVi was not the only company warned. In March 2026, the FDA issued warning letters to more than 30 telehealth companies for similar marketing violations related to compounded GLP-1 products. This was an industry-wide enforcement action, not a targeted investigation of MEDVi specifically. According to a STAT News analysis, at least 30% of the warned companies shared clinical affiliations with just four nationwide medical groups.
Second, a warning letter is not a finding of guilt. The FDA's own Regulatory Procedures Manual describes warning letters as “informal and advisory” communications that convey the agency's position but do not constitute final enforcement action. Companies receiving warning letters are given the opportunity to correct the identified issues, and many do so successfully.
Third, MEDVi maintains LegitScript certification — an independent compliance verification that requires ongoing monitoring, transparency standards, and adherence to applicable state and federal laws. LegitScript certification is required by major payment processors and advertising platforms including Google, Meta, and TikTok. This certification remains active as of this publication.
The warning letter does, however, raise legitimate questions about MEDVi's marketing practices and whether the company's rapid growth outpaced its compliance infrastructure — a concern that applies broadly across the telehealth GLP-1 space in 2026.
The Advertising Practices Question
A Drug Discovery & Development investigation published April 4, 2026 documented additional concerns about MEDVi's advertising ecosystem. The report identified more than 5,000 active MEDVi-related ads on Meta's platform, including some running under apparent fictitious personas with fabricated medical titles. MEDVi's own website includes a disclaimer acknowledging that individuals appearing in advertisements may be actors or AI-generated portrayals.
This practice exists within a broader industry context. In December 2025, a bipartisan coalition of 35 state attorneys general wrote to Meta expressing concern about AI-generated weight-loss advertising across the platform — not specific to MEDVi, but addressing the same category of advertising. The telehealth GLP-1 advertising landscape has attracted regulatory attention industry-wide.
It should be noted that the use of actors or models in healthcare advertising is not inherently illegal — the critical compliance question is whether such advertising is clearly disclosed and does not make false medical claims. MEDVi does include a disclosure on its website regarding the use of AI-generated and actor portrayals, though critics argue the placement and prominence of such disclosures may be insufficient.
The OpenLoop Health Situation
One of MEDVi's two primary clinical infrastructure partners, OpenLoop Health, has faced its own set of challenges in early 2026. In January, OpenLoop disclosed a cybersecurity breach in which a threat actor claimed to have accessed records from approximately 1.6 million patients. The company confirmed at least 68,160 affected individuals in Texas and now faces multiple class-action lawsuits related to the breach.
Separately, a class-action complaint filed in November 2025 against OpenLoop and compounding pharmacy Triad Rx alleges that compounded oral tirzepatide tablets sold through the network had “no demonstrated mechanism of absorption or efficacy.” The complaint names MEDVi as one of multiple consumer-facing storefronts in the OpenLoop network.
These are allegations in pending litigation, not proven findings. OpenLoop continues to operate, and the cases have not been resolved. However, consumers considering any telehealth platform that relies on OpenLoop infrastructure should be aware of these ongoing proceedings. For a detailed analysis of what the breach means for patients and what steps to take, see our telehealth data privacy report.
What Consumers Actually Experience: Review Data
Consumer review data presents a mixed picture that is consistent with many rapidly-scaling telehealth platforms:
Trustpilot shows a 4.4–4.5 out of 5 rating across more than 11,400 reviews. Many reviewers report positive experiences with medication effectiveness, fast shipping, and the convenience of the telehealth model.
ConsumerAffairs shows a lower 3.6 out of 5 rating across approximately 1,600 reviews. Negative reviews predominantly cite billing confusion related to auto-renewal policies, difficulty obtaining refunds, and customer service delays.
This discrepancy between platforms is not unusual in telehealth. Trustpilot reviews tend to skew toward customers who had positive experiences, while ConsumerAffairs attracts a higher proportion of consumers seeking resolution for complaints. Neither dataset alone tells the complete story.
The Broader Compounded GLP-1 Landscape in 2026
The MEDVi story cannot be fully understood without recognizing the massive regulatory uncertainty surrounding the entire compounded GLP-1 market in 2026. The FDA has signaled increasing enforcement against telehealth companies marketing compounded versions of semaglutide and tirzepatide, particularly as drug shortages that initially justified expanded compounding have begun to resolve for some formulations. For consumers specifically evaluating oral versus injectable GLP-1 options, the absorption science behind different delivery formats is an important factor.
Compounded medications — including those available through MEDVi — are not FDA-approved as finished products. MEDVi discloses this on its website, noting that compounded GLP-1s are produced in FDA-regulated facilities but have not been individually evaluated for safety, efficacy, or quality. This distinction is critical for consumer understanding and applies equally to every compounded GLP-1 provider, not just MEDVi.
Consumers evaluating any telehealth GLP-1 program — whether MEDVi, Hims, Ro, Henry Meds, or others — should verify the platform's current regulatory status, medication sourcing, and pharmacy partnerships before proceeding. The regulatory environment is evolving rapidly, and what was compliant six months ago may not remain so.
MEDVi Responds: The Company's Official Statement
On April 9, 2026, MEDVi founder Matthew Gallagher issued a public statement addressing the wave of coverage that followed the New York Times profile. The statement, characterized by the company as a response to “external speculation,” focused primarily on the FDA warning letter and the advertising practices controversy. It's worth examining what the statement says directly.
On the FDA warning letter, Gallagher drew a distinction between two domain names: medvi.io — the URL cited in the FDA's warning letter — and medvi.org, which the company describes as its primary domain. According to the statement, the medvi.io domain was operated by an affiliate marketing agency, not by MEDVi directly. The company's position is that the warning was directed at an affiliate whose website contained outdated copy, and that MEDVi required the affiliate to remove the flagged materials immediately. Gallagher stated: “My company MEDVi has never received a letter from the FDA.”
The company says it required the affiliate to remove the flagged materials and understands the affiliate responded directly to the FDA. This is a meaningful distinction if accurate — affiliate-operated domains creating compliance issues is a documented pattern across the broader GLP-1 telehealth industry, not unique to MEDVi.
On the advertising controversy, Gallagher acknowledged that MEDVi “recently became aware” of advertisements featuring what appeared to be AI-generated medical practitioners and stated the company has since updated its marketing practices to explicitly prohibit this type of advertising. MEDVi also reiterated its commitment to operating transparently and stated that course corrections have been made at each stage of the company's growth.
For consumers, the practical takeaway from the statement is that MEDVi continues to hold its LegitScript certification, maintains licensed clinical partnerships, and has taken active steps to address the advertising concerns raised publicly. The company did not announce any service disruptions, changes to medication sourcing, or modifications to its clinical partnerships.
What the Response Addresses — and What Remains Open
MEDVi's statement is a reasonable starting point for consumers trying to evaluate the company's position. A fair reading of the available public record, however, identifies a few specific questions the statement didn't directly answer — and that are worth knowing about if you're considering enrolling.
The most specific open question involves the medvi.org/welcome page. At the time the FDA warning was issued in February 2026, archived versions of medvi.org — the domain MEDVi identifies as its own primary address — reportedly featured Medvi-branded drug imagery similar to what the FDA flagged on medvi.io. The company's statement addressed only the medvi.io affiliate domain, not what appeared on medvi.org during the same period. As of this publication, that specific question hasn't been publicly answered.
A second open area involves compounded oral tirzepatide. Some MEDVi welcome pages have featured this product. It's worth noting — as this report has covered previously — that compounded oral tirzepatide currently has no published clinical evidence of absorption or weight loss efficacy. Injectable tirzepatide (the active ingredient in FDA-approved Zepbound) has an established evidence base; the oral compounded version does not. This applies to any telehealth provider offering this format, not MEDVi specifically, but it's a relevant consideration for anyone evaluating this particular product option.
On the advertising issue, the company said it “recently became aware” of fake-doctor ad accounts — though many of those accounts were deleted or altered within hours of media inquiries, raising questions about the timeline. The company hasn't clarified this publicly.
None of these open questions constitute findings of wrongdoing. They are exactly what they are: questions that haven't been publicly answered yet. The appropriate consumer posture is the same one this report has consistently recommended — verify before you enroll, check current regulatory status, and review all terms and disclosures directly on the platform.
Fair Assessment: Where Things Stand as of April 11, 2026
The MEDVi picture has filled in considerably since this report was first published on April 4. The company's response — combined with independent reporting from multiple outlets — gives a clearer, if still incomplete, view of what MEDVi is and where it stands today.
On the credit side: MEDVi continues to operate with LegitScript certification, verified clinical partnerships, and hundreds of thousands of customers — many of whom report straightforward, positive experiences. Gallagher's decision to respond publicly rather than go silent is notable. The affiliate domain defense on the FDA warning letter is a factual distinction that deserves fair treatment, even as surrounding questions remain open. And the company's stated commitment to prohibit AI-generated fake-doctor advertising going forward, if enforced, is the right move for consumers and the industry.
On the open side: the specific question of what appeared on MEDVi's own primary domain during the enforcement window remains unresolved. The oral tirzepatide evidence gap is a real consumer consideration that applies industry-wide. The litigation involving OpenLoop Health continues without resolution. And several questions raised by independent reporters went unanswered in the company's official statement.
The standard here isn't perfection. Every major telehealth platform operating in the compounded GLP-1 space in 2026 has navigated some version of the regulatory complexity MEDVi is facing. The standard is whether the platform delivers what it promises, operates with integrity, and handles compliance problems when they surface. On that measure, MEDVi has taken visible corrective steps — and several key questions remain open. Both things are true.
For consumers who have already enrolled and are satisfied with their care, there's no current finding that would suggest an immediate need to change course. For consumers actively evaluating whether to enroll, the honest recommendation is the same as it's always been for any telehealth platform: do your homework, consult your personal healthcare provider, and verify current program details directly before committing.
If you want to review MEDVi's current program — including pricing, medication options, and enrollment process — the details are available directly through the platform. View current MEDVi program details and pricing.
Consumers deserve access to complete, balanced information when making healthcare decisions. For a step-by-step framework for evaluating any telehealth platform's credentials before enrolling, see our consumer verification guide.
Anyone considering a GLP-1 telehealth program should consult with their personal healthcare provider, verify the current regulatory status of any platform they're evaluating, and review all terms, policies, and disclosures before enrolling.
This report was compiled from publicly available regulatory filings, verified news reporting, consumer review platforms, and company disclosures. HealthDataConsortium.org is committed to data-driven health reporting and does not provide medical advice. Individual results with any weight management program vary. Always consult a licensed healthcare professional before starting any medication.
HealthDataConsortium.org Editorial Team | Published April 4, 2026 | Updated April 11, 2026
