About Puri
Healthcare should be simpler.
Puri is a telehealth platform that connects patients with US-licensed physicians for weight management, men's health, women's health, peptide therapy, and more. We built it because the existing options are either too expensive, too slow, or too opaque about what you're actually getting.
What we are
What Puri is. And what it isn't.
Puri is:
- A technology platform and patient coordinator.
- A connection point between patients, licensed physicians, and licensed compounding pharmacies.
- HIPAA compliant at the infrastructure layer (AWS BAA, encrypted data, access logging, split-DNS PHI routing).
- Honest about what compounded medications are and what they are not.
Puri is not:
- Not a pharmacy. We do not compound or dispense drugs.
- Not a medical practice. We do not employ physicians or make prescribing decisions.
- Not an automated prescription pipeline. A licensed physician reviews every intake.
- Not a guarantee of treatment. Physicians decline when the clinical picture does not support it.
How we operate
Four things we will not compromise on.
Physician decides, not an algorithm
Every intake is reviewed by a US-licensed physician who makes the clinical decision. We do not auto-approve. We do not override a provider who declines. The physician is the final authority.
Compounded is not FDA-approved, and we say so
Compounded medications are prepared by licensed pharmacies under valid prescriptions. They are not FDA-approved finished drug products. We state this on every product page, every comparison page, and every intake flow. No exceptions.
No fake testimonials, no fake doctors
We will not display testimonials until we have real patient experiences with proper written release. We will not display physician profiles until we have signed agreements with real, named, credentialed providers. Both sections are disabled site-wide until that bar is met.
A prescription is never guaranteed
Completing an intake does not entitle you to a prescription. A licensed physician may decline based on contraindications, drug interactions, lab values, or clinical judgment. If you are declined, you are not charged for medication you did not receive.
Technical foundation
Built for compliance from day one.
We did not bolt HIPAA compliance onto an existing consumer app. We built the platform around it. Here is what that means in practice.
HIPAA compliant infrastructure
AWS BAA signed. Split-DNS architecture so PHI never flows through Cloudflare. All patient data encrypted at rest and in transit. Session cookies are HttpOnly, Secure, SameSite.
PHI access logging
Every staff access to patient data is recorded per HIPAA §164.312(b). Every intake submission generates an audit trail. Every admin sign-in is logged with IP and user agent.
Rate-limited and hardened
Auth endpoints are rate-limited at the nginx layer. fail2ban protects SSH. Unattended security upgrades are enabled. Security groups restrict traffic to ports 80, 443, and SSH.
PURi, LLC
A Florida limited liability company.
7901 4th St N, STE 300
St. Petersburg, FL 33702