Skip to main content

ADHD Telehealth Safety: What Happened with Done and Cerebral

Last updated: April 4, 2026

TLDR

Two major ADHD telehealth services have faced serious legal action: Done's CEO was arrested by the DOJ in June 2024 for Adderall distribution fraud, and Cerebral paid a $7M FTC settlement for overprescribing and sharing patient data with advertisers. This guide explains what happened, what it means for patients, and how to safely evaluate telehealth options.

What Happened with Done

Done’s pitch was simple: upload your ID, complete a questionnaire, see a clinician online, get a prescription. For people who had spent years trying to get an ADHD diagnosis, the accessibility was genuinely appealing.

In June 2024, Done’s CEO was arrested by the DOJ on charges related to Adderall distribution fraud. The allegations: Done prescribed stimulants without adequate medical oversight, operating more like a prescription distribution service than a clinical practice.

Done wasn’t a small fringe operator. It was a well-funded startup with recognized investors. The alleged oversight failure wasn’t a bug — it was baked into the business model.

What Happened with Cerebral

Cerebral had two separate problems. The FTC alleged it prescribed controlled substances, including stimulants and benzodiazepines, without adequate clinical safeguards. Separately, Cerebral shared sensitive patient data — diagnosis and prescription information — with Facebook, Google, and other advertisers via tracking pixels on the platform. People who sought mental health care had that information used for ad targeting.

The $7M FTC settlement resolved the allegations without Cerebral admitting liability. The company shifted its model and in March 2026 acquired Inflow, a CBT-based ADHD app.

What Patients Should Know

Done and Cerebral exposed two distinct risks: prescribing without adequate oversight, and monetizing patient health data. Both are avoidable if you know what to look for.

For prescribing: look for services that require multiple visits before a stimulant prescription, use board-certified psychiatrists rather than NPs following algorithms, and require ongoing monitoring rather than refill-on-demand.

For privacy: read the full privacy policy before entering any health information. Look for explicit language about tracking pixels and advertising data sharing. Services that accept insurance carry additional accountability through HIPAA.

Safer Options

Telehealth services like Talkiatry accept insurance, use board-certified psychiatrists, and operate within traditional clinical oversight structures. They’re slower and less convenient than Done was at its fastest. That’s partly what makes them worth using.

Tried every productivity system? This one's different.

Mutra exchanges impossible tasks between women with ADHD. You help one stranger, she helps you. Pick a plan to see pricing details and next steps.

See plans & pricing

Q&A

What happened with Done ADHD telehealth?

Done's CEO was arrested by the Department of Justice in June 2024 on charges related to Adderall distribution fraud. The allegations involved prescribing stimulants without adequate medical oversight — essentially running a prescription mill through a telehealth interface. Done had positioned itself as a fast, convenient ADHD diagnosis and medication service. The arrest raised serious questions about prescribing practices across the telehealth ADHD space.

Q&A

What happened with Cerebral?

Cerebral agreed to a $7 million FTC settlement in 2024 for two main issues: overprescribing controlled substances (stimulants and benzodiazepines) without adequate clinical oversight, and sharing patient data — including diagnosis and prescription information — with advertisers including Facebook and Google via tracking pixels. The data sharing violated patient privacy expectations and potentially HIPAA. Cerebral has since shifted focus toward therapy and acquired Inflow in March 2026.

Q&A

Is it still safe to use ADHD telehealth services?

Carefully evaluated services can be appropriate. The Done and Cerebral cases highlight specific failure modes: inadequate prescribing oversight, and patient data misuse. When evaluating any telehealth provider, look for: board-certified psychiatry (not just NP-led prescribing), clear privacy policies with no pixel tracking, in-network insurance options (which create additional accountability), and willingness to coordinate care with your primary care provider.

Cerebral agreed to a $7 million FTC settlement for overprescribing and sharing patient data with advertisers

Source: FTC settlement records

Done's CEO was arrested by the DOJ in June 2024 on charges related to Adderall distribution fraud

Source: DOJ announcement, June 2024

Inflow was acquired by Cerebral in March 2026

Source: Cerebral acquisition announcement, March 2026

Want to learn more?

Frequently asked

Common questions before you try it

What should I do if I was a Done or Cerebral patient?
If you received prescriptions through Done: consult your primary care physician or a psychiatrist about transitioning your care. Prescriptions may not be refillable through Done depending on the current status of the service. If you were a Cerebral patient concerned about data privacy: review the FTC settlement details and Cerebral's current privacy policy. Consider requesting your medical records if you plan to transition to a different provider.
What red flags should I watch for when choosing telehealth ADHD treatment?
Red flags include: very fast prescribing (diagnosis and prescription in under an hour with minimal history-taking), no follow-up requirements for stimulant refills, no coordination with other providers, vague or permissive privacy policies, marketing heavily focused on getting medicated quickly, and no in-network insurance options (which bypass accountability structures). Legitimate ADHD treatment takes time and involves more than a prescription.
Does the Done/Cerebral situation mean telehealth ADHD care is generally unsafe?
No. It means the field has had specific bad actors, and that the incentives for over-prescribing in a fee-for-service telehealth model are real. Telehealth can provide appropriate ADHD care when it involves adequate clinical oversight, proper privacy practices, and treatment that extends beyond medication to include psychoeducation, coaching, or therapy. The cases highlight what to look for, not a reason to avoid telehealth entirely.

Ready to stop doing it alone?

Get Started