The short answer
Buyers pay for revenue that keeps arriving after the founder leaves. In a cash-pay telehealth brand that means four things they can verify: patients who are contractually and operationally yours, a payment relationship in your name that moves with the company, retention you can show by monthly cohort, and a legal structure that survives a change of ownership without a state board or processor objecting. Everything else (brand, content, the ad account, the team) is priced on top of those.
There are buyers. Rock Health's Q3 2026 report, published October 12, counted 45 digital health M&A deals in the quarter and 164 for the year to date. Rock Health does not split that number by deal size or by consumer versus enterprise, so treat it as evidence of an active market, not as a comparable for your brand.
One thing this post will not give you is a revenue or EBITDA multiple. We could not find a published, sourced set of multiples for small DTC telehealth brands in 2026, and the numbers that circulate on broker sites are not tied to closed deals we can check. Your banker or broker will have real comps; ask them where each one came from. This is not legal or tax advice.
The diligence list
| What the buyer checks | Evidence they ask for | What raises the price | What cuts it or kills the deal |
|---|---|---|---|
| Patient relationship | Who the patient contracted with; terms of service; consent records | Patients are the brand's and its PC's | Patients belong to a platform's clinic |
| Records | Structured export of charts, orders, messages | Exportable today in a usable format | Records live only inside a vendor login |
| Payments | Merchant of record; processor; dispute history | Your own merchant account, clean dispute ratio | Platform is merchant of record; tokens cannot move |
| Retention | Monthly cohort curves, revenue by cohort | Month-3 and month-12 retention shown by cohort | A single subscriber count |
| Legal structure | MSO agreement, PC ownership, state licenses | Documents drafted for a change of control | Founder is the PC owner and also the seller, with no succession |
| Regulatory exposure | Revenue by product; warning letters; FTC issues | Branded drugs, no letters | Material compounded GLP-1 revenue share |
| Certification | LegitScript status; ad accounts | Certified in the operating entity's name | Certification held by a vendor |
| Platform terms | Vendor contract; termination; data clauses | Flat fee, exit and export clauses | Revenue share, exclusivity, no export |
| Pharmacy and clinicians | Contracts; who holds them | Assignable or replaceable | Held by the platform, non-transferable |
The patient relationship and the records
The first question is who the patient actually has a relationship with. If the patient signed up on a page that belongs to a platform's own medical group and the brand only ran traffic to it, the buyer is purchasing a marketing funnel. That is worth something, but it is priced as a lead source, not as a healthcare company. Our ownership post lays out the five dimensions, and the founders on Reddit asking "who actually owns the patient data? who owns the card tokens?" (r/telehealth, September 17) were asking the acquirer's question a year early.
Records come next. A buyer's integration team wants charts, orders, prescriptions and message history in a structured form they can load somewhere else. "We can export a CSV on request at termination" is a weaker answer than an API you can read today, and a buyer who wants you off your current vendor before closing will test the difference.
The merchant account and the card tokens
This is the item founders most often get wrong, and the one that most directly decides whether recurring revenue transfers.
If the platform is the merchant of record, your patients' saved cards sit in the platform's processor account. After a sale, the buyer has no way to keep charging them without asking every patient to re-enter a card, and a share of patients will not. If the merchant account is yours, the tokens and the dispute history are yours too. Stripe, for example, will export raw card data to another processor, but only at the account holder's request and only to a processor that is PCI DSS Level 1 compliant and can show its attestation of compliance, per Stripe's data migration documentation. Subscriptions and payment history export separately through the API.
The dispute history matters on its own. Visa's VAMP program has flagged merchants above a 1.5% ratio with an $8 fee per disputed transaction since April 1, 2026, and a buyer's processor will underwrite your history before it takes the account. The VAMP post covers how to keep it clean.
Retention you can show by cohort
A subscriber count tells a buyer how big the business is today. A cohort table tells them how big it will be in a year without new spending, and that is the number they are paying for. Build the report now: patients who started in each month, how many were still paying in months 2, 3, 6 and 12, and revenue per cohort. If most of your drop-off lands in months two and three, as it does in most GLP-1 programs (month-two churn), show the curve anyway and show what you changed.
A buyer who has to rebuild your cohorts from raw billing exports will assume the worst and price for it.
The MSO and PC: what actually gets sold
In most states with corporate practice of medicine rules, a non-physician buyer cannot own the professional corporation that employs or contracts the clinicians. What changes hands is the management services organization (the brand, the technology, the contracts, the staff), and the PC stays with a licensed physician under a management services agreement. The MSO and friendly-PC explainer covers the structure.
Two things make that clean in a sale. The agreements should already address what happens on a change of control, including how the physician owner can be replaced. And the founder should not be the single point of failure: if you are the physician who owns the PC and the person selling the MSO, the buyer needs a succession plan in writing before signing.
LegitScript is the other entity question. Its healthcare certification terms require a certified business to notify LegitScript within 30 days of a change in its business or regulatory status, and LegitScript reviews ownership and leadership as part of certification. We found nothing in the published terms that makes certification freely transferable, so plan for the buyer to confirm status with LegitScript before closing. Our LegitScript post covers the application itself.
Regulatory exposure, starting with compounded GLP-1
Diligence teams now ask for revenue by product, and the line they look at first is compounded semaglutide or tirzepatide. The Fifth Circuit affirmed FDA's shortage decisions on August 27, 2026, FDA's proposal to exclude both from the 503B bulks list is still pending a final order, and FDA has sent three waves of warning letters to telehealth marketers since September 2025. A brand with a large compounded share is selling revenue that a single federal notice can remove. Expect that revenue to be excluded from the price, held back in escrow, or the deal to wait.
The other questions on the list come from the FTC's July 29, 2026 complaint against Hims & Hers (which Hims denies): when the card is charged, how easy cancellation is, and whether health data reached ad platforms through pixels. The checkout spec post is effectively a pre-diligence checklist.
Platform terms
Read your platform contract as the buyer's lawyer will. They look for revenue share (it follows the business to the new owner and lowers its margin), exclusivity on pharmacy or providers, termination fees, and whether data and configuration leave with you. A flat fee with a written export clause is the easiest version to underwrite.
Here is where we stand, so you can check it. Turbopills runs billing on your own gateway accounts, so the brand is the merchant of record and the tokens and history are yours. The storefront sits on your domain. Your data is readable through our GraphQL API now, not only at termination. We do not hold your PC or your LegitScript certification; those are yours, set up with your counsel. We are in private beta and quote per program, so put the contract terms in front of your own lawyer before you rely on any of this.
FAQ
How much is a telehealth business worth? It depends on retained recurring revenue, profitability, and how cleanly patients, payments and records transfer. We have not found sourced 2026 valuation multiples for small DTC telehealth brands; ask a broker for comparables tied to closed deals.
Can a non-doctor buy a telehealth company? Usually a non-physician buys the management services organization, while the professional corporation stays owned by a licensed physician under a management services agreement, depending on each state's corporate practice of medicine rules.
Do card tokens transfer when you sell a subscription business? Only if the merchant account is yours. Processors such as Stripe export card data to another PCI DSS Level 1 processor at the account holder's request; if a platform is merchant of record, the tokens sit in its account.
How many digital health companies were acquired in 2026? Rock Health reported 164 M&A deals through Q3 2026, including 45 in Q3, in its October 12 report.