AI-Powered GLP-1 Telehealth Giant MEDVi Faces FDA Warnings and Lawsuits

Key Takeaways:

• MEDVi, profiled by The New York Times as an AI-powered company targeting $1.8 billion in 2026 sales, faces FDA warning letters and multiple lawsuits
• A data breach at partner OpenLoop Health exposed records from 1.6 million patients, including names, contact information, and medical data
• Class-action lawsuit alleges compounded oral tirzepatide has "no viable absorption pathway," challenging the effectiveness of sublingual GLP-1 tablets

The Rise and Scrutiny of AI-Powered GLP-1 Telehealth

MEDVi, a Los Angeles-based telehealth startup, has become the poster child for both the promise and perils of AI-driven healthcare disruption. On April 2, The New York Times presented MEDVi as a clear example of how AI could enable a single founder to build a $1.8 billion company with two full-time employees. But behind the headlines lies a more complex story of regulatory battles, safety concerns, and industry-wide enforcement actions.

Matthew Gallagher, the L.A. entrepreneur behind MEDVi, has called his firm "the fastest growing company in history," though he has since removed that phrase from his LinkedIn profile. The company uses AI services including ChatGPT, Claude, Grok, MidJourney and Runway to build its platform, while relying on third-party providers to handle doctors, pharmacies, shipping and compliance.

FDA Warning Letters and Regulatory Crackdown

The success story has a darker side that The Times article didn't fully explore. In February 2024, the FDA sent MEDVi a warning letter citing misbranding violations on its website, finding that the site language falsely implied FDA approval of compounded products and falsely suggested MEDVi was the compounder.

MEDVi was one of more than 30 telehealth companies warned during a broader enforcement action. The telehealth companies that have been warned — with names like Lovely Meds, Hello Cake, and MEDVi — don't directly prescribe the medications, which are not approved by the FDA.

A STAT analysis shows that cited companies can share clinical DNA, with at least 30% of more than 70 telehealth companies warned by the FDA having publicly stated affiliations with four nationwide medical groups: Beluga Health, OpenLoop, MD Integrations, and Telegra.

Major Data Breach Affects 1.6 Million Patients

Perhaps most concerning for people seeking treatment is a massive data breach affecting MEDVi's infrastructure partner. MEDVi's care is provided by OpenLoop Health clinicians, and on January 7, 2024, a threat actor breached OpenLoop's systems claiming to have exfiltrated records from approximately 1.6 million patients, including names, contact information, dates of birth and medical information, with at least 68,160 affected individuals in Texas alone.

This breach highlights the risks of the white-label telehealth model, where consumer-facing brands rely on backend infrastructure companies that may serve dozens of different platforms. For people using MEDVi or similar services, this means their medical data may be stored by companies they've never heard of.

RICO Lawsuit Challenges Oral GLP-1 Effectiveness

Beyond regulatory issues, MEDVi faces serious legal challenges about the effectiveness of its products. The named plaintiff, Darby Day, alleges he bought a one-month supply of pills through MEDVi for $279.99, but Day, who had previously used an injectable GLP-1, took the pills as directed for over a week but did not notice a difference and stopped taking it out of concern that the medication was ineffective.

The complaint brings scientific evidence to challenge oral tirzepatide effectiveness: tirzepatide is a large peptide molecule that digestive enzymes destroy before it can reach the bloodstream, and the only FDA-approved oral GLP-1, Rybelsus, required a specialized absorption enhancer called SNAC to achieve roughly 1% bioavailability.

No published clinical data shows that compounded oral tirzepatide achieves therapeutic absorption without similar technology, raising questions about whether sublingual tablets marketed by telehealth providers can deliver meaningful results.

Impact on Access and Treatment Options

The MEDVi situation reflects broader tensions in the GLP-1 market as shortages end but affordable access remains limited. During the GLP-1 drug shortages of 2023 through 2025, compounding served a genuine access function for people who could not get branded medications, but the regulatory climate has shifted as shortages for certain formulations have eased.

The FDA has drawn sharper lines between individual patient-specific compounding and mass-marketed compounded products, viewing mass-marketed compounding as operating outside the intended scope of compounding exemptions. This creates uncertainty for the millions of people who have turned to telehealth platforms for GLP-1 medications when traditional healthcare options were unavailable or unaffordable.

Demand for GLP-1 drugs has surged in recent years, helping fuel the rise of telehealth companies offering remote prescribing and delivery services, with compounding pharmacies and direct-to-consumer telehealth providers stepping in during periods when brand-name drugs were in short supply.

What This Means for You

If you're currently using MEDVi or a similar telehealth platform, you don't need to panic, but you should stay informed. You should be aware of the OpenLoop Health data breach and take steps to protect your personal information, stay informed about regulatory changes that could affect compounded GLP-1 availability, and maintain a relationship with your personal healthcare provider throughout your treatment.

Monthly costs for FDA-approved options have dropped significantly with programs like TrumpRx, where semaglutide tablets are now available at $149 to $299 versus $1,349, and tirzepatide injections at $299 to $449 versus $1,087. This makes FDA-approved medications more accessible than ever before.

For people considering telehealth GLP-1 treatment, the MEDVi situation underscores the importance of choosing reputable providers with transparent practices and clear regulatory compliance. Look for providers that clearly explain the difference between compounded and FDA-approved medications, and don't hesitate to ask questions about where your medical data is stored and how it's protected.

When evaluating your options, consider reviewing our cost guide to understand pricing across different providers and formulations. The landscape is changing rapidly, and what seemed like the only affordable option six months ago may no longer be your best choice today.