LegitScript Addiction Treatment Certification: What It Is, Why It Matters, and How to Use It in Your Marketing

By Humbear Media · May 31, 2026

Short answer: LegitScript addiction treatment certification is a third-party credentialing process that verifies a facility meets legal and ethical standards — and it is a hard requirement before Google, Microsoft Advertising, and Meta will approve paid ads for addiction treatment services in the United States. Without it, your paid digital marketing is effectively locked. With it, you gain a compliance signal that also strengthens your organic credibility and admissions pipeline.

What Is LegitScript Addiction Treatment Certification?

LegitScript is an independent certification and monitoring company that works with major ad platforms to screen healthcare advertisers. Its Addiction Treatment Certification program verifies that a treatment center or lead-generation service complies with applicable federal and state laws, holds required licenses, and follows ethical marketing practices — including the federal rules on patient brokering and deceptive advertising.

Launched in response to widespread fraud and patient-brokering scandals in the addiction treatment industry, the certification was formally adopted by Google as a prerequisite for running addiction-related paid ads in the United States. Google’s Healthcare and Medicines advertising policy explicitly requires LegitScript certification for addiction treatment advertisers. Meta’s Advertising Standards similarly restrict addiction treatment ads to certified entities in the U.S.

Why Did the Ad Platforms Require This Certification?

The backstory matters because it shapes what the reviewers actually look for. Between roughly 2015 and 2019, patient-brokering schemes — in which marketers collected insurance information and sold leads to facilities regardless of clinical fit — caused documented harm and a wave of federal prosecutions. Congress responded with the SUPPORT for Patients and Communities Act (2018), which strengthened anti-kickback and patient-brokering prohibitions at the federal level. The ad platforms, facing regulatory and reputational pressure, partnered with LegitScript to build a scalable vetting layer.

Understanding this history is strategically useful: the reviewers are not looking for a marketing portfolio. They are looking for evidence that your facility is licensed, transparent, and not paying for referrals in prohibited ways.

Who Needs LegitScript Certification?

LegitScript distinguishes between two types of applicants:

Treatment providers — residential, outpatient (PHP/IOP/OP), detox, and MAT (medication-assisted treatment) facilities that accept patients directly.
Lead generation / marketing companies — entities that operate helplines, websites, or campaigns that connect potential patients with providers but do not provide treatment themselves.

Each category has its own application track and documentation requirements. If your agency runs paid campaigns on behalf of a treatment center, the center (and potentially the agency, depending on ad account structure) must hold certification before those ads can run. Humbear Media helps clients navigate which entity must apply and gathers the documentation needed to move through the process efficiently — see our addiction treatment marketing services for more detail.

What Does the Certification Process Actually Require?

LegitScript’s published requirements are extensive. Expect to provide:

State licensure documentation — current, valid facility license(s) for every state in which you operate or intend to advertise.
Accreditation evidence — accreditation from a recognized body such as The Joint Commission, CARF International, or ACHC is not always mandatory but significantly strengthens the application and is required in some states.
Ownership and corporate structure disclosure — LegitScript reviews principals for relevant legal history.
Website review — your public-facing website must accurately describe services, include required disclosures, avoid deceptive claims, and not offer prohibited inducements (free flights, gift cards, etc.).
Marketing practices attestation — you must attest that your referral and marketing activities comply with the federal Anti-Kickback Statute and applicable state patient-brokering laws.
Application fee — LegitScript charges an initial certification fee and an ongoing annual monitoring fee; current pricing is published on their certification page.

Review timelines vary. LegitScript states that complete applications are typically reviewed within a few weeks, but applications returned for additional documentation can take longer. Build this timeline into any paid-media launch plan.

How LegitScript Certification Affects Your Marketing Channels

Google Ads

Google requires both LegitScript certification and a separate Google Ads account-level authorization before addiction treatment ads can serve. The authorization request is submitted through Google’s healthcare verification portal after you receive your LegitScript certificate. Without both steps completed, ads targeting addiction-related keywords will not run — regardless of budget or Quality Score. Google’s policy page outlines exactly which ad categories require certification.

Microsoft Advertising

Microsoft Advertising follows a substantially similar policy and accepts LegitScript certification as the qualifying credential for addiction treatment advertisers in the United States.

Meta (Facebook and Instagram)

Meta requires certification for addiction treatment ads in the U.S. and enforces this at both the ad account and the advertiser identity level. Even certified advertisers face ongoing automated review for ad copy and creative that violates Meta’s health-related advertising rules, so certification is necessary but not sufficient — ongoing copy compliance matters.

Programmatic / Display Networks

Many premium programmatic supply-side platforms (SSPs) and healthcare-focused ad networks have adopted LegitScript certification as a prerequisite or strong positive signal. Even where not technically required, holding certification reduces ad rejection rates and brand-safety flags.

How to Use LegitScript Certification as a Marketing Asset — Compliantly

Certification is not just an operational unlock. Used correctly, it is a trust signal that supports organic authority and conversion. Here is how to deploy it without overstating it:

Display the LegitScript seal on your website, particularly on admissions landing pages and your About/Why Us sections. LegitScript provides an embeddable, dynamic seal that links to your public certificate record — use the dynamic version so visitors can verify it in real time. This directly supports the E-E-A-T (Experience, Expertise, Authoritativeness, Trustworthiness) signals Google’s quality raters evaluate.
Reference certification in ad copy where platform policies allow, framing it as independent verification rather than a marketing superlative. For example: “Independently certified by LegitScript” is accurate and permissible; “the nation’s most certified program” is not.
Include certification in your Google Business Profile and third-party directory listings (Psychology Today, SAMHSA’s treatment locator, etc.) to strengthen entity consistency across the web.
Mention it in content — blog posts, FAQ pages, and About pages — as evidence of your facility’s accountability practices. This creates the kind of verifiable, entity-specific facts that AI answer engines surface when responding to queries about your facility or treatment type.
Highlight it in admissions conversations. Many families researching treatment are specifically told to look for certified facilities. Equip your admissions counselors to explain what the certification means in plain language.

For a broader look at how LegitScript fits into a full paid and organic admissions growth strategy, visit our behavioral health lead generation page.

What LegitScript Certification Does NOT Cover

It is equally important to know the limits of certification:

It is not HIPAA compliance. HIPAA obligations — including the Privacy Rule, Security Rule, and Breach Notification Rule — are governed by HHS and apply independently of any marketing certification. The HHS Office for Civil Rights enforces HIPAA. LegitScript does not.
It is not a 42 CFR Part 2 authorization. Substance use disorder records have additional confidentiality protections under 42 CFR Part 2, administered by SAMHSA. Marketing teams must understand these rules separately — they govern what patient information can be used in retargeting, testimonials, and case studies.
It does not guarantee ad approval. Individual ads, landing pages, and audience targeting choices are still subject to platform-level review. Certified advertisers regularly receive ad disapprovals for copy or creative that violates platform health policies.
It does not substitute for state-level compliance. State laws on patient solicitation, patient brokering, and deceptive healthcare advertising vary significantly and are enforced independently. The SAMHSA treatment locator and state behavioral health authorities are the relevant contacts for state-specific licensing questions.

Common Reasons Applications Are Delayed or Denied

In our experience working with treatment centers through this process, the most common friction points are:

Expired or missing state licenses for all operating locations
Website content that includes prohibited inducements (free transportation, cash incentives) or outcome guarantees
Ownership disclosure issues — principals with relevant legal history that was not disclosed upfront
Incomplete documentation of marketing practices, particularly for facilities that use third-party lead generators
Mismatched corporate entity names across the application, website, and state license

The most effective preparation step is a pre-application audit of your website and licensing documentation before you submit, so that LegitScript reviewers encounter a complete, consistent package on first review.

Maintaining Certification: The Ongoing Monitoring Requirement

LegitScript does not issue a one-time certificate and walk away. Certified facilities are subject to ongoing monitoring. LegitScript reviews certified advertisers’ websites and ad practices on an ongoing basis and can suspend or revoke certification if standards are no longer met. This means:

Any significant website redesign or content change should be reviewed against LegitScript standards before launch.
New advertising campaigns and landing pages should be reviewed for compliance with both LegitScript requirements and platform policies.
License renewals and ownership changes must be reported proactively.

Treating certification as a living compliance obligation — not a one-time checkbox — protects your ad account continuity and your admissions revenue.

Frequently Asked Questions

Is LegitScript certification required for all addiction treatment advertising?

It is required specifically for paid advertising on Google, Microsoft Advertising, and Meta in the United States. It is not a federal legal requirement for operating a treatment center, but without it, paid search and social ads for addiction treatment services will not be approved by those platforms.

How long does LegitScript certification take?

LegitScript states that complete applications are typically reviewed within a few weeks. Applications returned for additional documentation take longer. Facilities should budget at minimum four to eight weeks from submission to certification, especially if licensing documents need to be gathered first.

How much does LegitScript addiction treatment certification cost?

LegitScript charges an initial application fee plus an annual monitoring fee. Exact pricing varies by entity type and is published on LegitScript’s official certification page. Costs are separate from any agency fees for preparing and managing the application.

Can a marketing agency get LegitScript certified instead of the treatment center?

It depends on the advertising structure. Treatment providers must hold certification to advertise their own services. Lead generation companies that operate independently also have their own certification track. In most cases, the treatment center itself must be certified; the agency may also need certification depending on how ad accounts are structured.

Does LegitScript certification satisfy HIPAA requirements?

No. HIPAA is a separate federal law enforced by the HHS Office for Civil Rights. LegitScript certification addresses marketing and advertising standards, not patient privacy or data security obligations. Both apply independently.

What happens if a certified facility’s website changes?

LegitScript monitors certified facilities on an ongoing basis. Material changes to website content, services, ownership, or licensing status should be reported to LegitScript and reviewed for continued compliance. Certification can be suspended or revoked if standards are no longer met.