• Skip to main content

MedicalFoundationofNC.org

  • Home
  • Telehealth
    • GLP-1 Medications
  • Weight Loss
  • Blood Sugar
    • Blood Pressure
  • Skin Health
    • Skin Tag Removal
  • Comparisons
  • About

MEDVi Scam or Legit? FDA Warning Letter, Lawsuits, Data Breach, and Verified Facts — A 2026 Fact Check

posted on April 4, 2026

FTC Affiliate Disclosure: This article may contain affiliate links. If you enroll through a link in this article, a commission may be earned at no additional cost to you. Editorial content is not influenced by affiliate relationships.

MEDVi responded publicly to FDA warning letter allegations on April 9. Here's what the company said, what remains unanswered, and what it means for consumers evaluating the program. Updated April 11, 2026.

Search for “MEDVi” in April 2026 and you will find two completely different stories sharing the same results page. One tells the story of a $1.8 billion AI-powered telehealth startup that may represent the future of lean business operations. The other raises serious questions about FDA enforcement, litigation, data breaches, and advertising practices. Both stories contain verifiable facts. Neither tells the whole truth by itself.

For consumers trying to figure out whether MEDVi is legitimate — many of whom are still working out what GLP-1 medications are and how compounding works — the challenge is telling apart what has been proven from what has been alleged. It also means understanding the difference between industry-wide issues and problems specific to this one company.

This analysis examines every major claim — positive and negative — against the publicly available evidence.

Claim: “MEDVi Is a Scam”

What the evidence shows: MEDVi is not a scam in the conventional sense of the word. The company holds active LegitScript certification — an independent, third-party verification that requires ongoing compliance monitoring, adherence to applicable state and federal laws, and transparency standards. LegitScript is required by major payment processors and advertising platforms. Scam operations can't get it or keep it.

MEDVi also has a substantial, verifiable customer base. Trustpilot shows more than 11,400 reviews with a 4.4 to 4.5 average rating. ConsumerAffairs lists roughly 1,600 reviews with a 3.6 average. The New York Times independently verified MEDVi's financial claims, confirming $401 million in 2025 revenue. These aren't the markers of a fraudulent operation.

Where the concern has merit: Consumer complaints about billing practices are real and well-documented across multiple review platforms. The most common issues: auto-renewal confusion, difficult cancellation processes, and refund guarantee terms that some consumers say shifted from 3 months to 5 months after they enrolled. These problems fall into the category of customer service and billing transparency — not fraud. They're common across the telehealth industry. But they are legitimate consumer concerns that MEDVi should address.

MEDVi's pricing: compounded semaglutide injections start at $179 for the first month, then $299 per month for refills. Tirzepatide injections start at $349. Oral tablets start at $249. All programs auto-renew. Cancellation must happen at least 72 hours before your next billing date. Read these terms in full before you enter your payment information.

Claim: “MEDVi Received an FDA Warning Letter”

This is confirmed fact. On February 20, 2026, the FDA sent MEDVi warning letter #721455 identifying misbranding violations on its website. The FDA found that MEDVi's marketing language falsely suggested the company compounded the semaglutide and tirzepatide it sold. The agency also found that certain claims implied FDA approval or evaluation of compounded products.

Important context: The FDA issued warning letters to more than 30 telehealth companies in March 2026 for similar violations. A STAT News analysis found that at least 30 percent of those companies shared clinical ties to just four nationwide medical groups. This was an industry-wide enforcement action — not a targeted investigation of MEDVi alone.

The FDA's own Regulatory Procedures Manual describes warning letters as “informal and advisory” — they communicate the agency's position but do not represent a final enforcement action or a finding of violation. Companies that receive warning letters get the chance to fix the problems. Many do so successfully without further action.

What the warning letter does not mean: The letter did not say that MEDVi's medications were contaminated, improperly formulated, or dangerous. It addressed marketing and labeling practices, not product safety. Misbranding and medication safety are different issues.

Claim: “MEDVi Is Involved in Lawsuits”

Partially confirmed, with important differences between cases. MEDVi's name appears in connection with several legal proceedings. The nature and status of each case varies:

The OpenLoop/Triad Rx class action (November 2025): This lawsuit was filed against OpenLoop Health and compounding pharmacy Triad Rx — not against MEDVi directly. The complaint names MEDVi as one of multiple consumer-facing platforms in the OpenLoop network. The core allegation: compounded oral tirzepatide tablets have no scientifically demonstrated mechanism of absorption. These are allegations in pending litigation, not proven findings.

Siuksta v. MEDVi, LLC (May 2025): A federal Telephone Consumer Protection Act lawsuit. MEDVi was served but did not appear. The case was voluntarily dismissed by the plaintiff after the court noted the default. A voluntary dismissal does not mean the defendant was found liable.

James v. Medvi LLC (March 2026): A complaint filed in the Central District of California. The case is in early stages. No rulings have been made on the merits.

What this means for consumers: Lawsuits are not proof of wrongdoing. Companies at MEDVi's scale — especially in the heavily litigated telehealth space — regularly face legal proceedings. The OpenLoop class action is potentially the most significant because it raises scientific questions about product efficacy. But it names infrastructure partners, not MEDVi's direct operations. Consumers should keep an eye on these cases but shouldn't treat allegations as conclusions.

Claim: “MEDVi Used Fake Doctors in Advertising”

Partially confirmed. Drug Discovery & Development investigation reporting documented MEDVi-related Facebook ads running under apparent fictitious personas with fabricated medical titles. One Facebook page running sponsored MEDVi ads listed its category as “Entertainment website” and gave a physical address that does not appear to exist. Other ads featured names like “Professor Albust Dongledore” and “Dr. Richard Hörzgock.”

Earlier reporting by Futurism in May 2025 documented similar practices on MEDVi's main website, including AI-generated patient photos and deepfaked before-and-after weight-loss images. In the Times profile, founder Matthew Gallagher acknowledged that MEDVi's initial website featured AI-generated content of this nature.

MEDVi's website now includes a disclaimer stating that individuals appearing in advertisements may be actors or AI-generated portrayals.

Context and nuance: Using actors and models in healthcare advertising is a common industry practice. It's not illegal when properly disclosed and when the advertising doesn't make false medical claims. The compliance question centers on whether disclosures are adequate, whether the ads make false claims about medical outcomes, and whether consumers are materially misled about who is providing their care.

MEDVi's current website lists specific, identifiable physicians affiliated with the platform — not AI-generated personas. Whether those physicians' credentials and affiliations are accurately represented is something consumers can verify through state licensing databases and specialty board directories.

Claim: “MEDVi Has Responded Publicly to the Controversy”

Confirmed — with follow-up questions still open. On April 9, 2026, MEDVi founder Matthew Gallagher issued a public statement responding to the wave of coverage following the Times profile. It's the most substantive public communication the company has made since the story broke, and it deserves a fair read.

On the FDA warning letter, Gallagher drew a specific distinction between two domain names. The URL cited in the FDA warning — medvi.io — was operated by an affiliate marketing agency, not by MEDVi directly, according to the statement. The company's position is that the warning was directed at the affiliate's outdated copy, that MEDVi required the affiliate to remove the flagged materials immediately, and that the affiliate responded directly to the FDA. Gallagher stated: “My company MEDVi has never received a letter from the FDA.”

On the fake-doctor advertising, the statement acknowledged that MEDVi “recently became aware” of advertisements featuring what appeared to be AI-generated medical practitioners. The company says it has since updated its marketing practices to explicitly prohibit this type of advertising going forward.

What the response addresses well: The affiliate domain distinction is a factual point that has been underreported in the coverage. If the medvi.io URL was genuinely operated by an independent affiliate rather than MEDVi's own team, that changes the legal picture on the warning letter — and that's worth knowing. MEDVi's continued LegitScript certification, active clinical partnerships, and lack of service disruptions are all consistent with a company managing compliance issues rather than one in regulatory freefall.

What the response leaves open: The statement addressed medvi.io but didn't directly explain what appeared on medvi.org — MEDVi's own stated primary domain — during the same enforcement period. Archived versions of medvi.org reportedly featured Medvi-branded drug imagery similar to what the FDA flagged. That specific question hasn't been publicly resolved.

On the fake-doctor timeline, the statement said the company “recently became aware” of the issue — but many of the accounts were deleted or altered within hours of media inquiries. The company hasn't clarified that timeline publicly.

None of these open questions are findings of wrongdoing. They're questions that haven't been answered yet. The appropriate posture remains the same: verify current program details before you enroll, and don't treat either promotional coverage or controversy coverage as the final word.

For consumers who want to review MEDVi's current program — pricing, medication options, and enrollment process — the details are available directly through the platform. View current MEDVi program details and pricing.

Claim: “MEDVi's Partner Had a Data Breach”

Confirmed. OpenLoop Health disclosed in January 2026 that a threat actor breached its systems and claimed access to records from roughly 1.6 million patients. The company confirmed at least 68,160 affected individuals in Texas through attorney general filings. OpenLoop now faces multiple class-action lawsuits related to the breach.

This is a real concern for current and former MEDVi patients whose care was processed through OpenLoop. But the breach happened at OpenLoop, not at MEDVi. Every telehealth brand using OpenLoop's infrastructure was potentially affected. OpenLoop serves as the clinical backend for many telehealth companies beyond MEDVi.

If you think you may be affected, monitor for breach notification from OpenLoop. Consider credit monitoring precautions. Review your rights under applicable state data breach notification laws.

Claim: “MEDVi Is the Fastest Growing Company in History”

Unverified and almost certainly exaggerated. This claim, made by founder Matthew Gallagher on LinkedIn, hasn't been independently confirmed. The New York Times did verify MEDVi's reported $401 million in 2025 revenue, which represents remarkable growth by any measure. But calling any company “the fastest growing in history” requires comparative data across all industries and time periods. No such comparison has been presented.

The verified numbers are impressive on their own. There's no need to evaluate them against an unproven superlative. The $1.8 billion 2026 revenue figure is a projection, not a confirmed result.

What Is Actually Verified as of April 11, 2026

Stripping away both the promotional and controversy angles, here is what is factually verifiable about MEDVi right now:

MEDVi holds active LegitScript certification. The company generated $401 million in 2025 revenue according to NYT-verified financials. The FDA warning letter addressed marketing practices at a domain MEDVi attributes to an affiliate — not product safety. MEDVi's founder issued a public response on April 9 acknowledging advertising issues and committing to prohibit AI-generated fake-doctor advertising. Clinical infrastructure partners face unresolved litigation and a confirmed data breach at OpenLoop. Consumer reviews are mostly positive on Trustpilot (4.4 to 4.5 out of 5 across 11,400-plus reviews) and more mixed on ConsumerAffairs (3.6 out of 5 across roughly 1,600 reviews). The primary complaint pattern involves billing and refund issues. Several specific questions raised by independent reporters remain publicly unanswered — including what appeared on MEDVi's primary domain during the enforcement window and the timeline around the fake-doctor ad accounts. MEDVi operates in a market segment facing growing regulatory pressure industry-wide.

How MEDVi's Situation Compares to Competitors

It is fair to ask whether MEDVi's issues are unique or whether they reflect broader industry patterns. Here is how the main competitors compare:

Hims & Hers is publicly traded, offers both compounded and FDA-approved GLP-1 options, and has a larger support team. Hims also faces its own legal battles, including a patent infringement suit from Novo Nordisk. Compounded semaglutide starts around $199 per month.

Ro offers both compounded and branded GLP-1 medication paths. Branded Wegovy starts at $199 for the first two months, then $349 per month. Ro more clearly separates its compounded and brand-name options.

Henry Meds focuses on compounded GLP-1s at $197 to $297 per month. Fewer billing complaints, smaller customer base.

The FDA warning letter situation, the data breach at an infrastructure partner, and consumer billing complaints are not unique to MEDVi. These are patterns across the telehealth GLP-1 industry. MEDVi's version has gotten more attention because of the NYT story, but the underlying dynamics affect the category as a whole.

Recommendation for Consumers

The responsible approach to the MEDVi question is neither automatic trust nor automatic suspicion. Evaluate based on verified facts, not on headlines in either direction.

If you're considering enrollment: verify MEDVi's current LegitScript certification status. Read the billing and cancellation terms in full before you pay. Understand that you'll be getting compounded medications that aren't FDA-approved as finished products. Talk with your personal physician. Understand who is providing your clinical care — currently OpenLoop Health clinicians.

If you're already enrolled: keep an eye on the regulatory situation for changes that could affect the availability of compounded GLP-1 products. Be aware of the OpenLoop data breach and take steps to protect yourself. Maintain your relationship with your personal doctor throughout treatment.

MEDVi also operates its QUAD compounded ED program as a separate product line. The FDA warning letter addressed GLP-1 marketing specifically — it did not reference QUAD. For men who discovered MEDVi through the weight loss headlines but are interested in the ED product, our QUAD analysis covers the formulation, who it's designed for, and what to verify before enrolling.

The MEDVi situation will keep developing through 2026. Consumers who make decisions based on verified information — rather than either promotional stories or fear-driven coverage — will be in the best position to protect both their health and their wallets.

Frequently Asked Questions

Is MEDVi a scam?

No. MEDVi holds active LegitScript certification, has NYT-verified financials confirming $401 million in 2025 revenue, and has more than 11,400 Trustpilot reviews with a 4.4 to 4.5 average rating. The company does face legitimate regulatory questions and consumer complaints about billing practices. But the available evidence doesn't support calling it a scam. It's a legitimate business with real issues that consumers should understand before enrolling.

What does the FDA warning letter mean for MEDVi customers?

The February 2026 warning letter addressed marketing and labeling practices — not the safety of the medications being dispensed. MEDVi's public response attributes the cited domain to an affiliate rather than its own operations. The FDA found that certain claims falsely implied FDA approval of compounded products. A warning letter is advisory, not a finding of guilt. More than 30 other telehealth companies received similar warnings in the same time frame.

Is MEDVi involved in lawsuits?

MEDVi's name appears in connection with several legal proceedings, though the company isn't the primary defendant in the most significant case. The largest action — the OpenLoop/Triad Rx class action — names MEDVi as one of multiple consumer-facing platforms. A separate TCPA lawsuit was voluntarily dismissed. A newer complaint was filed in March 2026 and hasn't been decided. All cases involve allegations, not proven findings.

How much does MEDVi cost?

Compounded semaglutide injections: $179 first month, $299 per month for refills. Compounded tirzepatide injections: $349 per month. Oral GLP-1 tablets: starting at $249 per month. Brand-name paths (Wegovy, Zepbound): $99 membership plus medication cost. All programs are cash-pay with no insurance billing. Programs auto-renew, and you must cancel at least 72 hours before your next billing date.

How does MEDVi compare to Hims, Ro, and Henry Meds?

MEDVi has the lowest entry price at $179 per month. Hims starts around $199. Ro offers branded Wegovy from $199 to $349. Henry Meds starts at $197 to $297. Both Hims and Ro offer FDA-approved branded medication options alongside their compounded products. MEDVi has recently added brand-name paths but is primarily known for its compounded offerings. Consumer complaints about billing are more common for MEDVi than for Henry Meds, based on publicly available review data.

Did MEDVi use fake doctors in advertising?

Investigative reporting documented MEDVi-related Facebook ads running under fictitious personas with fabricated medical titles. MEDVi's website includes a disclaimer that advertising may feature actors or AI-generated portrayals. In its April 9 public statement, MEDVi acknowledged becoming aware of the issue and committed to prohibiting this type of advertising going forward. The actual clinical care is provided by licensed clinicians in the OpenLoop Health and CareValidate networks — not by the personas shown in advertisements.

What happened with the OpenLoop Health data breach?

In January 2026, OpenLoop Health disclosed a cybersecurity breach that may have affected 1.6 million patient records. The breach happened at OpenLoop, not at MEDVi directly. But MEDVi patients whose care was routed through OpenLoop may be affected. OpenLoop confirmed at least 68,160 affected individuals in Texas and faces multiple class-action lawsuits. Watch for breach notification and consider credit monitoring precautions.

Should I trust MEDVi's 4.94 out of 5 rating from some review sites?

Be cautious with any rating that appears unusually high. Some affiliate review sites display ratings like 4.94 out of 5 based on unverified or self-selected data. The most reliable public review data comes from independent platforms. Trustpilot shows a 4.4 to 4.5 out of 5 across more than 11,400 reviews. ConsumerAffairs shows a 3.6 out of 5 across roughly 1,600 reviews. The gap between platforms reflects different reviewer demographics — but the Trustpilot number, not inflated claims, is the more credible benchmark.

What did MEDVi say in its official response?

On April 9, 2026, founder Matthew Gallagher issued a public statement characterizing the FDA warning letter as directed at an affiliate-operated domain rather than MEDVi's own site. The statement acknowledged AI-generated fake-doctor advertising in MEDVi's ecosystem and committed to prohibiting it going forward. The company reaffirmed its LegitScript certification and continued clinical partnerships. Several specific questions raised by independent reporters — including what appeared on MEDVi's own primary domain during the enforcement window — weren't directly addressed in the statement.

Has the MEDVi situation been resolved?

Not fully. As of April 11, 2026, MEDVi continues to operate with active LegitScript certification and no service disruptions. The company has taken visible corrective steps on advertising practices. The FDA warning letter situation remains in the context of an industry-wide enforcement action. Litigation involving infrastructure partners is ongoing and unresolved. Several questions raised by journalists remain publicly unanswered. The situation is developing — consumers should check for updates before making enrollment decisions.

This article is for informational purposes only. It is not medical or legal advice. GLP-1 medications require a prescription and clinical evaluation. Compounded medications are not FDA-approved finished products. Consult licensed professionals for medical and legal guidance.

MedicalFoundationOfNC.org Editorial Team | Published April 4, 2026 | Updated April 11, 2026

Filed Under: Telehealth

Medical Disclaimer: MedFoundationNC.org is not a medical practice, pharmacy, or licensed healthcare provider. Nothing on this website constitutes medical advice, diagnosis, or treatment. All content is educational and informational. Consult your physician before starting any new supplement, medication, or health program. Do not change or discontinue prescribed medications without your physician’s guidance. FTC Disclosure: Some content on this site contains affiliate links. If you make a purchase through these links, we may earn a commission at no additional cost to you. This does not influence our editorial analysis. Our Standards & Disclosures. Non-Affiliation Notice: MedFoundationNC.org is not affiliated with The Medical Foundation of North Carolina, Inc., UNC Health Foundation, UNC Health Care, the UNC School of Medicine, or the University of North Carolina at Chapel Hill. This domain was previously associated with that organization, which now operates at unchealthfoundation.org. This website is an independent publishing operation with no connection to that organization, its programs, or its fundraising activities.

© 2026 MedFoundationNC.org. All rights reserved. | About | Our Standards & Disclosures