LegitScript Certification for Addiction Treatment: The 2026 Operator's Guide

For an addiction treatment program, one hard gate stands between you and the largest source of high-intent patient demand in the country: paid search and social advertising. Since 2018, Google, Microsoft, and Meta have refused to run a single addiction-treatment ad in the United States from any provider that is not LegitScript certified. If you want to appear in Google Ads for "detox near me," promote your program on Facebook or Instagram, or buy treatment-related inventory on Bing, LegitScript certification is not optional — it is the price of admission.

This guide explains what LegitScript certification is, exactly what LegitScript reviews, what it costs and how long it takes in 2026, and how to prepare so your application clears on the first pass instead of stalling for months. It is written for operators and founders who need to turn on demand generation without tripping over the compliance landmines — EKRA, patient brokering, and misleading claims — that the certification is specifically designed to catch.

What LegitScript Certification Is — and Why the Ad Platforms Require It

LegitScript is a third-party verification and monitoring company that the major advertising platforms rely on to vet who is allowed to advertise addiction treatment services. It is the only certification and monitoring body recognized by Google, Microsoft, and Meta for the drug and alcohol addiction treatment category, and its certification is honored by other networks such as Nextdoor as well.

The requirement traces back to a specific moment. In 2017, Google paused rehab-related advertising after widespread reporting that deceptive operators and lead brokers were exploiting people searching for help at their most vulnerable. Rather than build an in-house vetting apparatus, the platforms outsourced the problem. In April 2018, Google announced that addiction treatment advertisers would need LegitScript certification to run ads, and Meta and Microsoft adopted the same standard. The result is a single, privately administered credential that functions as a national checkpoint for treatment marketing.

For a legitimate program, that is actually good news. The barrier that keeps bad actors out is the same barrier that, once cleared, lets you compete for paid placement against a smaller, vetted field.

Who Needs LegitScript Certification

Any US-based provider that wants to run paid advertising for addiction treatment on the major platforms needs certification. In practice, that spans the full continuum of care: medical detox and withdrawal management, residential and inpatient treatment, partial hospitalization (PHP) and intensive outpatient (IOP), standard outpatient, and medication-assisted treatment including opioid treatment programs. Recovery residences and the clinical laboratories that serve the addiction space can fall under related LegitScript programs as well.

A few clarifications operators frequently ask about:

• Organic reach is not gated. Your website, SEO content, and unpaid social posts do not require certification — the gate applies to paid ads on the covered platforms.
• Certification is per organization and scales with scope. Fees and review complexity increase with the number of locations and distinct programs you are certifying.
• It is becoming a trust signal beyond advertising. Referral sources, EAPs, and some payers increasingly treat LegitScript certification as a marker of a legitimate, transparent operator.

What LegitScript Actually Reviews

LegitScript certification is not a rubber stamp. The review verifies that your organization is a real, licensed, transparent treatment provider — not a lead-generation front or a program making claims it cannot support. The standards fall into three broad categories.

Registration and compliance

• Valid state licensure. You must hold current state licenses or certifications for the specific services you provide and advertise; a program advertising residential SUD treatment must be licensed for residential SUD treatment in its state.
• A real physical treatment operation. LegitScript verifies that you run an actual treatment facility, not a call center or lead broker that hands patients off to third parties.
• Compliance with applicable law. This includes federal requirements around controlled substances for programs that prescribe or dispense medications, and adherence to the laws that govern your services and payers.

Internal practices

• Ownership and legal-history transparency. Applicants disclose ownership and material legal history, generally covering the prior ten years, so LegitScript can assess the integrity of the operation.
• Qualified clinical staff. You demonstrate that clinical services are delivered by appropriately licensed and credentialed personnel.
• Sound business practices. Billing, admissions, and referral practices must hold up to scrutiny — which is where marketing compliance and anti-kickback exposure come directly into play.

External practices

• Accurate, non-misleading website claims. Your site cannot promise guaranteed outcomes, misrepresent success rates, obscure your identity, or make claims your program cannot substantiate.
• Transparent identity and contact information. Prospective patients must be able to tell exactly who they are contacting.
• Privacy compliance. Your privacy policy, data handling, and any call tracking or lead intake must respect patient privacy expectations and applicable rules.

Cost and Timeline in 2026

Two numbers anchor the budget. As of 2026, the addiction treatment category carries a $1,995 application fee and a $1,995 annual monitoring fee, with the recurring fee billed every twelve months from your original certification date.

• Costs scale with scope. Multiple locations and multiple distinct programs increase both the fees and the depth of review, so a multi-site operator should budget accordingly.
• Hardship relief exists for nonprofits. Qualifying nonprofit providers facing financial hardship may request a waiver of the annual fee, with LegitScript determining eligibility based on the information provided.
• Timelines depend almost entirely on readiness. Programs that apply with current licensure, clean credentials, and a compliant website commonly clear in four to six weeks; those with documentation gaps, expired credentials, or marketing copy that needs rework routinely run eight to sixteen weeks.

The single biggest driver of a fast approval is preparation. Nearly every delay comes from something the applicant could have fixed before submitting.

Why Marketing Compliance and EKRA Are Inseparable From Certification

The reason LegitScript scrutinizes your business and marketing practices so closely is that addiction treatment sits under one of the most aggressive anti-kickback regimes in health care: the Eliminating Kickbacks in Recovery Act (EKRA), codified at 18 U.S.C. § 220 and enacted as part of the SUPPORT for Patients and Communities Act of 2018.

EKRA makes it a federal crime to knowingly solicit, receive, pay, or offer any remuneration to induce referrals to a recovery home, clinical treatment facility, or clinical laboratory. Two features make it especially dangerous for treatment operators:

• It applies to all payers. Unlike the federal Anti-Kickback Statute, EKRA reaches private insurance and cash-pay arrangements, not just federal health care programs.
• The penalties are severe. Violations can carry fines of up to $200,000 and up to ten years in prison per occurrence.

This is not theoretical. EKRA enforcement climbed through 2025, and a 2025 Ninth Circuit decision confirmed that the statute can reach percentage-based and volume-based compensation paid to sales and marketing staff — exactly the kind of arrangement many programs and their outside call centers historically relied on. Paying a marketer, a "patient navigator," or a lead vendor based on how many admissions they generate is a fast path to criminal exposure.

LegitScript's review, and the platforms' ongoing monitoring, are designed to catch precisely these arrangements. That is why certification is best understood not as a marketing formality but as an attestation that your entire path from inquiry to admission — your website, your intake, your lead vendors, and your compensation structures — is clean. Building that path correctly is part of sound compliance and risk infrastructure, not an afterthought bolted on at application time.

A Pre-Application Readiness Checklist

Before you submit, get these in order. Doing so is the difference between a four-week approval and a four-month one.

• Current state licensure. Confirm every service you advertise is covered by an active state license or certification, with no lapses or pending renewals.
• Entity and ownership documentation. Have your corporate records, ownership structure, and required disclosures assembled and internally consistent.
• Verified staff credentials. Ensure clinical staff licenses and credentials are current and documented.
• A clean website audit. Remove guaranteed-outcome language, unsupported success rates, misleading insurance messaging, and anything that obscures who you are.
• A compliant privacy policy. Make sure your privacy practices, consent language, and any call tracking are documented and defensible.
• A marketing and referral review. Scrutinize every vendor, call center, affiliate, and compensation arrangement for EKRA and patient-brokering exposure before an examiner does.
• Consistent business information. Align your business name, address, and phone number across your website, listings, and application.

Why Applications Stall or Get Denied

Most rejections and long delays trace back to a short list of recurring problems:

• Advertising services you are not licensed to provide. A mismatch between your marketing and your licensure is an immediate red flag.
• Operating as a lead generator. Programs that route patients to third parties rather than treating them do not qualify.
• Misleading website claims. Guarantees, inflated outcomes, and vague or deceptive insurance messaging sink applications.
• Undisclosed legal history. Failing to surface ownership or legal issues that LegitScript will find anyway erodes trust fast.
• Non-compliant marketing arrangements. Volume-based marketing compensation and lead-buying that raise EKRA concerns.
• Inconsistent or unverifiable business information. Details that do not match across your public footprint.

Oregon and Washington Programs: The Local Prerequisite

Because LegitScript verifies licensure before anything else, certification success in the Pacific Northwest starts with clean state credentials. Oregon programs need the appropriate Oregon Health Authority approval — most commonly an Oregon Certificate of Approval for behavioral health and SUD services — and Washington programs need a Washington Behavioral Health Agency license from the Department of Health for the services they deliver. If those are missing, incomplete, or mismatched to the services you intend to advertise, certification will stall regardless of how polished your website is.

For operators in competitive regional markets — Bend, Eugene, Portland, Salem, and across to Seattle — the payoff is significant. Certification is what lets you compete for the paid search demand that referral relationships alone cannot supply.

Staying Certified

Certification is not a one-time event. LegitScript monitors certified providers on an ongoing basis and requires annual renewal, which re-reviews your documentation, staff, licensure, and current marketing practices. To keep it clean:

• Keep licensure and credentials current. Renew before anything lapses, and update LegitScript when your services change.
• Keep your website honest. Every new landing page and campaign is subject to the same standards as your original application.
• Keep marketing arrangements compliant. Re-check vendor contracts and compensation as you scale so growth does not quietly create EKRA exposure.

Get Certified — With One Accountable Partner

LegitScript certification touches every part of a treatment program at once: your state licensing, your clinical staffing, your website and marketing claims, your privacy posture, and your referral and compensation practices. Handing each piece to a different vendor is how applications drag on for months and how avoidable compliance gaps turn into denials.

Saint Health Group runs the entire engagement end to end. We confirm and, where needed, secure the underlying state licensing and accreditation; write and implement the compliance, privacy, and marketing and admissions policies LegitScript expects to see; remediate website claims and lead-handling practices to eliminate EKRA and patient-brokering exposure; assemble and manage the full application; and build the ongoing monitoring discipline that keeps you certified year after year. You get one accountable partner and a program that walks into the review already meeting the standard — not a checklist and a wish of luck.

If you are preparing to turn on paid advertising, or your certification is stuck, schedule a consultation and we will map the fastest compliant path to certified.