Telehealth stimulant conviction: lessons from the Done Global case

Telehealth was supposed to be the healthcare equivalent of ordering groceries without changing out of sweatpants: convenient, practical, and a little magical. For millions of Americans, remote care made it easier to reach clinicians, manage mental health conditions, and avoid the classic waiting-room experience of sitting beside a fish tank that may or may not have given up on life.

But the Done Global case shows what happens when convenience collides with controlled substances, aggressive growth, and weak clinical guardrails. In November 2025, a federal jury in San Francisco convicted Ruthia He, founder and CEO of Done, and David Brody, the company’s clinical president, for their roles in a scheme involving the illegal distribution of Adderall and other stimulants, plus health care fraud connected to reimbursement claims. He was also convicted of conspiring to obstruct justice.

The case became a landmark moment because federal authorities described it as the first criminal drug distribution prosecution tied to telemedicine prescribing by a digital health company. In plain English: the government was not simply saying, “Oops, your compliance checklist was dusty.” It was saying that a telehealth business model allegedly turned prescription access into a revenue engine where medical necessity became a speed bump instead of the steering wheel.

Why the Done Global case matters

The case matters because it sits at the crossroads of three very real issues: ADHD care access, controlled-substance safety, and the fast-growth culture of digital health. ADHD is not a fad, a personality quirk, or an excuse for losing your keys in the refrigerator. It is a recognized condition that can affect attention, impulse control, emotional regulation, school, work, relationships, and daily functioning.

Prescription stimulants can be appropriate and effective when prescribed after a proper clinical evaluation and monitored responsibly. At the same time, medications such as Adderall and Ritalin are Schedule II controlled substances under federal law, meaning they have accepted medical uses but also carry a high potential for misuse and dependence. That combination creates a tricky policy puzzle: make care too hard to access, and legitimate patients suffer; make access too easy and poorly supervised, and patients, pharmacies, insurers, and the public can be put at risk.

Done Global entered the spotlight during the pandemic-era telehealth boom, when federal flexibilities allowed many clinicians to prescribe controlled medications through telemedicine without a prior in-person exam, as long as required conditions were met. Those flexibilities were designed to prevent care from collapsing during a public health emergency. They were not designed to create a “diagnose, prescribe, subscribe” assembly line.

What prosecutors alleged

According to federal prosecutors, Done Global operated a subscription-based model for online ADHD diagnosis, treatment, and medication refills. The government alleged that the company and related parties arranged for more than 40 million pills of Adderall and other stimulants and obtained more than $100 million in revenue.

The core allegation was not that telehealth itself is illegal. It is not. The allegation was that prescriptions were issued outside the usual course of professional practice and without legitimate medical purpose. Prosecutors described a system where patients could receive stimulants after limited interactions, sometimes with few treatment options offered besides stimulant medication. They also alleged that deceptive advertising, pressure on clinicians, and efforts to keep subscription revenue flowing weakened medical judgment.

In December 2025, after the individual convictions, federal prosecutors also announced an indictment against Done Global and a Florida medical practice, Mindful Mental Wellness P.A., alleging that the companies participated in the same broader scheme. The indictment accused the companies of illegal distribution, health care fraud, and obstruction-related conduct. As with all indictments, those company-level charges are allegations unless proven in court.

The difference between telehealth and a prescription mill

Telehealth is a tool. A hammer can build a house or smash a window; the hammer is not the villain. The Done Global case is a reminder that the legal and ethical question is not “Was care delivered online?” The real question is, “Was care clinically appropriate, documented, individualized, and compliant with controlled-substance rules?”

A responsible telehealth model includes careful patient intake, identity verification, medical history, review of symptoms, screening for risks, medication history, follow-up, informed consent, and documentation. For ADHD care, responsible evaluation may include ruling out or considering other explanations for symptoms, such as sleep problems, anxiety, depression, substance use, trauma, thyroid issues, or learning disorders. The clinician should be making the decision, not the marketing funnel.

A prescription mill, by contrast, treats the prescription as the product and the clinical visit as a checkout screen. That is where things get legally dangerous. If the business model rewards speed, volume, renewals, and retention more than careful care, regulators may see the platform not as a clinic with software but as software wearing a lab coat.

Lesson 1: Clinical independence must be real, not decorative

One of the biggest lessons from the Done Global case is that clinical independence cannot be a sentence buried in an employee handbook. It must be visible in the workflow, compensation structure, quality review, and company culture.

If clinicians feel pushed to prescribe because the company wants monthly subscription revenue, the business is asking for trouble. If internal dashboards celebrate prescription rates more loudly than patient outcomes, that is not “data-driven healthcare.” That is a compliance smoke alarm begging for batteries.

Digital health companies should separate clinical decisions from growth metrics. Marketing teams can measure signups, conversion rates, and churn. Clinicians should measure patient safety, diagnostic quality, treatment appropriateness, follow-up completion, and adverse-event response. Mixing those worlds too aggressively can turn a medical platform into a legal piñata.

Lesson 2: Advertising can become evidence

The Done Global case also shows that social media marketing is not just a customer acquisition strategy. In a government investigation, it can become evidence of intent. Prosecutors pointed to deceptive ads and online tactics that allegedly attracted people seeking easy access to stimulants.

That does not mean healthcare companies cannot advertise. They can. But healthcare advertising must be accurate, balanced, and careful, especially when it involves controlled substances. “Fast ADHD meds” might sound like a growth marketer’s dream, but it can sound very different when read aloud in a courtroom.

Good healthcare marketing should help people understand services, eligibility, limitations, costs, privacy practices, and what a proper evaluation involves. It should not imply that a specific medication is guaranteed, that diagnosis is automatic, or that clinical safeguards are annoying obstacles on the way to the good stuff.

Lesson 3: Subscription models need medical friction

Subscriptions are great for streaming movies, coffee beans, and socks with tiny dinosaurs on them. Healthcare is different. A subscription model can support continuity of care, but it can also create pressure to keep patients enrolled, satisfied, and renewing.

In the Done Global case, prosecutors alleged that the subscription structure encouraged easy access to stimulants in exchange for monthly fees. That is the danger zone. When a patient pays every month, a company may be tempted to treat the refill as customer retention. But controlled substances require ongoing medical judgment. A refill is not a loyalty perk.

Digital clinics should build “medical friction” into subscription care. That means appropriate follow-ups, periodic reassessments, documentation checks, escalation pathways, pharmacy communications, and risk reviews. A little friction can prevent a lot of fire.

Lesson 4: Documentation is not paperwork; it is the story of care

In healthcare, if it is not documented, it may as well have happened in a fog machine. For telehealth stimulant prescribing, documentation matters even more because the clinician may not have an in-person relationship with the patient.

Strong documentation should show why the diagnosis is supported, why the treatment plan is appropriate, what alternatives were considered, what risks were reviewed, what monitoring will occur, and how patient concerns are handled. This protects patients, clinicians, and the organization.

Weak documentation creates a vacuum. And in legal cases, vacuums get filled by emails, Slack messages, marketing copy, billing records, and whatever unfortunate spreadsheet someone named “final_FINAL_really_final_metrics.xlsx.”

Lesson 5: Patient access must not be sacrificed

One of the most important parts of this story is what should not happen next: legitimate patients should not be treated like suspects because a company allegedly abused the system. After the Done-related enforcement action became public, public health officials warned that patients who relied on subscription-based telehealth platforms could face disrupted access to care.

That matters. For people with ADHD, suddenly losing care can affect work, school, driving, relationships, and daily stability. A crackdown on bad actors should not become a wall between patients and responsible clinicians.

The better path is balanced oversight. Regulators should target deceptive, unsafe, and fraudulent models. At the same time, policymakers should preserve telehealth access for patients who live in rural areas, face transportation barriers, cannot easily find specialists, or need flexible care because life does not always schedule itself around clinic hours.

Lesson 6: Telehealth rules are still evolving

Federal telemedicine flexibilities for prescribing controlled medications have been extended through December 31, 2026. Under those temporary rules, DEA-registered practitioners may prescribe Schedule II-V controlled substances through telemedicine without a prior in-person evaluation if required conditions are satisfied.

That extension is not a free-for-all. It is more like a bridge while regulators work on long-term policy. Companies that read “temporary flexibility” as “do whatever makes the revenue chart look like a rocket ship” are reading the room with a blindfold on.

The future of telehealth prescribing will likely include more scrutiny around patient identity, clinician licensing, prescription monitoring program checks, documentation, referral relationships, pharmacy red flags, and corporate influence over medical decisions. Companies that prepare now will be calmer later. Companies that do not prepare may discover that “move fast and break things” sounds less charming when the things are federal laws.

What digital health companies should do now

Build compliance into the product

Compliance should not be a PDF nobody opens after onboarding. It should be built into the platform itself. For example, the software can require complete clinical notes before certain actions, flag early refill requests, track missed follow-ups, and alert supervisors when prescribing patterns drift outside expected ranges.

Review compensation incentives

Companies should examine whether clinician compensation, supervisor bonuses, or internal rankings encourage prescribing volume. Even subtle incentives can create risk. The safest model rewards quality, safety, documentation, and appropriate follow-up rather than speed or medication conversion.

Audit marketing language

Every ad, landing page, influencer script, and email campaign should be reviewed for accuracy. Avoid language that promises medication, minimizes evaluation, or implies that controlled substances are easy to obtain. Healthcare marketing should attract appropriate patients, not bait regulators with a neon sign.

Strengthen pharmacy relationships

Pharmacies are not vending machines with fluorescent lighting. Pharmacists have legal and professional duties to identify red flags. Digital health companies should treat pharmacy concerns as safety signals, not obstacles to route around.

Create a real escalation system

If a patient reports side effects, misuse concerns, conflicting medical history, or signs that a treatment plan is unsafe, the platform needs a clear escalation process. Serious concerns should not disappear into a customer support queue between “password reset” and “coupon code not working.”

What clinicians can learn

Clinicians working in telehealth should remember that their license, not the company’s pitch deck, is attached to the prescription. A platform may provide software, scheduling, billing, or marketing, but the clinician remains responsible for medical judgment.

That means clinicians should be cautious about any arrangement that discourages thorough evaluations, limits treatment options, pushes rapid prescribing, or makes it hard to say no. A healthy clinical environment respects the professional decision to prescribe, not prescribe, taper, refer, reassess, or pause treatment when needed.

Clinicians should also keep careful records, understand federal and state prescribing rules, use prescription monitoring programs when required or clinically appropriate, and communicate clearly with patients about expectations. Telehealth can be excellent care. But excellent care still needs a spine.

What patients should take away

Patients should not read the Done Global case as proof that telehealth is bad or that ADHD treatment is suspicious. That would be the wrong lesson. The right lesson is that good care should feel like healthcare, not like a checkout cart.

A responsible clinician will ask questions. Sometimes many questions. They may discuss symptoms, medical history, sleep, mood, substance use, family history, school or work functioning, prior treatment, and other health conditions. They may recommend therapy, coaching strategies, lifestyle changes, nonstimulant options, additional evaluation, or follow-up appointments. That is not “making it hard.” That is medicine doing its job.

Patients should also be wary of any service that appears to promise a specific controlled medication before a real evaluation. Good telehealth can be convenient, but convenience should never mean skipping safety.

The bigger lesson: innovation needs guardrails

The Done Global case does not mean digital health is doomed. It means digital health is growing up. Early telehealth companies often sold speed, convenience, and access. The next generation must prove quality, safety, privacy, and accountability.

Innovation in healthcare is not just about reducing clicks. It is about improving outcomes without turning patients into metrics and clinicians into prescription engines. The companies that win long-term will be the ones that design for trust: clear rules, careful care, honest advertising, strong documentation, and leadership that understands the difference between scaling access and scaling risk.

Additional experiences and practical reflections on the Done Global case

The Done Global case feels especially important because it reflects a tension many patients and clinicians have experienced in real life: the healthcare system can be painfully slow, but shortcuts can be dangerous. Many adults seeking ADHD care have spent years being misunderstood, dismissed, or told to “just use a planner,” as if a planner has ever magically folded laundry, answered emails, and remembered where the car keys went. Telehealth offered relief by making care less intimidating and more reachable.

For a patient in a small town, a working parent, a student without reliable transportation, or someone who cannot take half a day off for an appointment, remote care can be the difference between getting help and giving up. That is why the Done Global case should not become an excuse to roll healthcare backward. The lesson is not “ban telehealth.” The lesson is “build telehealth that can survive sunlight.”

From a patient-experience perspective, one warning sign is when the service feels more like a sales funnel than a clinic. If the website emphasizes speed, guaranteed outcomes, or medication access more than evaluation, safety, follow-up, and clinician judgment, the experience may be drifting away from care. Patients deserve convenience, but they also deserve a clinician who is willing to slow down when something does not add up.

From a clinician-experience perspective, the case is a reminder that remote work does not remove professional responsibility. A clinician may be seeing patients through a laptop, but the standard of care does not shrink to the size of the screen. If a platform’s schedule is too tight to allow thoughtful evaluation, if messages pile up without safe follow-up systems, or if leadership treats low prescribing rates like poor performance, clinicians should view those signals seriously.

From a business-experience perspective, founders should understand that healthcare is not ordinary consumer tech. A/B testing button colors is one thing. A/B testing clinical pressure around controlled substances is another universe, and that universe contains subpoenas. Growth teams must learn the language of medical necessity, fraud risk, state licensure, patient privacy, pharmacy red flags, and documentation. Compliance is not the department of “no.” It is the department that helps the company still exist next year.

There is also an important trust lesson. Once patients believe telehealth companies are cutting corners, the reputational damage spreads beyond one company. Responsible telehealth providers then have to work harder to prove they are not part of the same problem. That is unfair, but trust is like a glass phone screen: one bad drop and everyone notices the cracks.

The most practical takeaway is balance. Telehealth should keep the best parts of digital care: easier scheduling, broader access, less travel, faster communication, and flexible follow-up. But it must pair those benefits with serious safeguards: complete evaluations, clinician independence, careful prescribing, privacy protection, transparent billing, and responsive patient support.

The Done Global case will likely influence how regulators, prosecutors, pharmacies, insurers, clinicians, and investors evaluate digital health companies for years. The companies that adapt will not simply ask, “Can we prescribe this online?” They will ask, “Can we defend this clinical decision, this workflow, this advertisement, this refill, and this business model if someone examines it closely?” That question may not sound glamorous, but in healthcare, boring safety questions are often what keep everyone out of trouble.

Conclusion

The telehealth stimulant conviction in the Done Global case is not a rejection of virtual care. It is a rejection of virtual care without enough medical judgment, oversight, and honesty. Telehealth can expand access to ADHD treatment and other behavioral health services, but it must not turn controlled substances into subscription perks.

The strongest lesson is simple: technology can make healthcare faster, but it cannot replace clinical responsibility. Digital health companies that respect that truth can build services patients actually trust. Those that ignore it may discover that the fastest route to growth can also be the fastest route to a courtroom.

Note: This article is an editorial analysis based on public U.S. legal, regulatory, medical, and consumer-protection information. It is not legal advice, medical advice, or a substitute for consultation with qualified professionals.