Last week’s issue said: ask for the citation. This week FDA wrote one — a warning letter to the largest compounder of GLP-1s in the country — and the sentence that matters most in it is about the prescribers, not the pharmacy.

Then a randomized trial about your front desk.

📡 The Radar

1. The PCAC six: ten weeks on, still no rule. Since the July 23–24 advisory vote on BPC-157, KPV, TB-500, MOTS-c, Semax and Epitalon, nothing has reached the Federal Register. The most recent FR entry on 503A bulk substances is still the April 16 notice announcing that meeting (Federal Register, Docket FDA-2025-N-6895); the only compounding items since July are an animal-drug notice, a paperwork notice for outsourcing-facility registration, and a neonatal parenteral-nutrition guidance — none of them touching the 503A bulks list. The only announced next step remains the second PCAC meeting “before the end of February 2027” on five more peptides (FDA PCAC page). What it means for your clinic: we will keep logging this one as “checked, nothing changed” until it changes. That line is the point — a dated record that you looked is what a monitoring program looks like from the outside. Nothing about your peptide catalog should have moved since August on the strength of the vote, and nothing has happened since to change that.

2. FDA’s warning letter to Empower reads like a memo to your prescribers. On September 18, FDA issued a warning letter to Empower Clinic Services, LLC d/b/a Empower Pharmacy — by most counts the largest 503A source of compounded semaglutide and tirzepatide in the country (FDA warning letter, 09/18/2026). The agency’s position: the tirzepatide/niacinamide and semaglutide/cyanocobalamin products are essentially copies of the approved drugs, the added ingredient notwithstanding, and the volume — thousands of orders a month in the window inspectors reviewed — looks like manufacturing, not patient-specific compounding. The letter’s own words: “The volume of products you are producing suggests that differences between products you are compounding and the FDA-approved products are pretextual.” It also cites aseptic-processing gaps (smoke studies, media fills, environmental monitoring) and gives the firm 15 working days to respond.

The part that lands on clinics is the prescriber finding. FDA reviewed the “significant difference” statements prescribers must supply to justify a compounded version of an approved drug, and found them “repeated verbatim across many records” — and noted that third-party technology platforms that hand prescribers pre-selected menu options undercut the idea that the statement is an individualized clinical judgment at all. What it means for your clinic: two things, in order. Supply: if Empower is your source for compounded GLP-1s, a warning letter is the step before injunction or seizure. Qualify a second licensed 503A source this month — not because Empower will necessarily fail, but because your patients’ continuity should not depend on one firm’s response letter. Records: if your telehealth platform or EMR offers a dropdown for the significant-difference rationale, understand that FDA has now said in writing that it reads a dropdown as pretext. Every compounded GLP-1 script in your files should carry a rationale written for that patient — an allergy, a documented intolerance, a dose that isn’t sold — in the prescriber’s own words. Pull ten charts this week and read them as an inspector would.

3. The DSCSA small-dispenser deadline moved a year — and clinics that dispense are dispensers. In August FDA extended its exemption from the Drug Supply Chain Security Act’s enhanced electronic-tracing requirements for “small dispensers” to November 27, 2027, a year past the prior November 2026 date. A small dispenser is one whose owning company has 25 or fewer full-time employees licensed as pharmacists or qualified as pharmacy technicians as of November 27, 2026 (FDA DSCSA exemptions page, current as of 08/26/2026). FDA pairs the extension with a reminder that the requirements already in force do not pause. What it means for your clinic: if you hand product to patients in-office — vials, pens, kits — you are a “dispenser” under this statute whether or not you think of yourself as one. The extension buys time on the electronic package-level verification piece. It does not touch the standing obligations: buying only from authorized trading partners and holding transaction information for what you receive. Which brings this issue back to where it started — the question “where did this vial come from” has an FDA answer, a DOJ answer, and now a supply-chain-statute answer, and they all want the same piece of paper. Ask counsel whether the small-dispenser definition reaches you (it turns on pharmacist and tech headcount, not clinic size) and put the answer in the file.

🔭 The Watchlist

  • PCAC round two, before the end of February 2027 — cathelicidin (LL-37), GHK-Cu, dihexa, melanotan II, PEG-MGF (FDA). Same test as round one: an advisory vote is not a rule.

  • The 503B GLP-1 exclusion — FDA’s May 1 proposal not to add semaglutide, tirzepatide or liraglutide to the 503B bulks list (Federal Register, 05/01/2026) had its comment period extended in June and has since closed. No final determination yet. If it lands, 503B-sourced GLP-1s go away and every clinic on that channel moves to 503A patient-specific scripts — with exactly the documentation FDA just criticized at Empower.

  • FTC click-to-cancel — the Eighth Circuit vacated the 2024 rule; the FTC published an advance notice of proposed rulemaking on March 13 and comments closed April 13. Next step would be a proposed rule. Membership-model clinics: your cancellation flow is the exposure. We’ll cover the practical version in a coming issue.

🔧 The Operator Lesson: stop billing for the empty chair

Every consultant tells you to charge a no-show fee. The best available evidence says it doesn’t work.

Researchers ran a randomized controlled trial across Danish orthopaedic outpatient clinics — 6,746 patients. The intervention group was told in advance they’d be fined 34€ for missing an appointment. The result: no statistically significant reduction in no-shows. Both groups sat near 5%. And the detail that should end the conversation — 79% of the fines that were imposed went unpaid, even after two reminder letters (Blaehr, Vaeggemose & Søgaard, BMJ Open, 2018).

Read that last number again, because it’s the whole lesson. A no-show fee is not revenue. It is a receivable you have to chase from someone who has already demonstrated they don’t want to engage with you. You’ve converted an empty chair into an empty chair plus an accounts-receivable problem plus a collections conversation that makes you the villain.

Meanwhile the problem is real and it isn’t shrinking. In MGMA’s August 2025 poll of 265 practices, 27% said no-shows had gone up year over year, and only 13% said they’d improved (MGMA Stat).

The fix isn’t a better fee. It’s a different sequence.

Most clinic funnels run: book → confirm → remind → see → collect. Every step between booking and collection is a place where the money leaks and the chair empties.

Invert the last step to the front: pay → book → see.

The patient pays for the evaluation before the calendar opens. Not a deposit you might refund. Not a card on file you might charge. A completed transaction that buys a specific thing — the provider evaluation — which is a real service with real value whether or not they love the answer.

What changes:

  • There is no fine to collect, because nobody owes you anything. The money arrived before the risk did.

  • The no-show stops being a financial event. It’s a scheduling inconvenience. You’ve already been paid for the work you prepared to do.

  • Your schedule fills with people who chose. Paying is a filter. It is the cheapest qualification step you will ever deploy, and it runs itself.

  • Your front desk stops being a collections desk. That role change alone is worth the switch.

The objection is always the same: won’t that kill conversion? Some, yes. You will book fewer appointments. You will also see a materially higher share of the ones you book, and you’ll stop paying staff to chase people who were never going to come. Measure the metric that matters — completed, paid evaluations per week — not appointments booked.

One caveat, because the gate creates one new risk: a patient who prepays, misses, and disputes the charge is a chargeback, and chargebacks are the number your processor watches. Put the refund and reschedule terms on the checkout page in plain language, and honor them the same way every time. A gate with clear terms produces almost no disputes. A gate with fine print produces the ones that get your account reviewed.

The part nobody audits: the stray link

Here’s the failure mode, and it’s the reason this issue exists.

You build the gate. Payment first, booking second, redirect wired correctly. You test it. It works. Then, over the following months, links to the booking step leak out into the world:

  • The old “Book Now” button still live on a page you forgot

  • A direct scheduler link a staff member pasted into a text thread because it was faster

  • A link in an email template from before the change

  • The scheduler’s own public booking page, which was never private

  • A cached social post or an old ad creative still in rotation

  • A partner or affiliate site linking to where the booking page used to be

Every one of those is an unlocked side door into the paid funnel. The gate is intact. People are simply walking around it. And it won’t show up as an error anywhere — it shows up as unpaid appointments on a calendar you believed was gated, which most owners misread as “the funnel isn’t converting.”

The audit, once a quarter, thirty minutes:

  1. Open your scheduler in a private window, logged out. Can you reach a bookable slot without paying? If yes, that’s your leak.

  2. Site-search your own domain for your scheduler’s URL and any legacy booking path. site:yourclinic.com plus the scheduler domain will find the buttons you forgot.

  3. Search your outbound email and SMS templates for the raw scheduler link. Automations are the worst offender — they were written once and never revisited.

  4. Check every ad account and social profile for live creative or link-in-bio pointing at the old path.

  5. Ask your staff directly, without blame: “when a patient wants to book fast, what link do you send?” You will learn something. The answer is almost never the funnel you built.

  6. Fix by redirect, not deletion. Point every legacy booking URL at the payment step. A 404 loses the patient; a redirect converts them.

Do that once and you’ll usually find at least one open door. Do it quarterly and the gate stays a gate.

Before you go

New here? The Clinic Brief is a weekly read on what changed in the regulatory and business environment for cash-pay clinics, with the primary source attached every time.

The free Processor-vs-EMR Reconciliation Worksheet is the monthly pass that surfaced $58,000 in silently declined charges at one practice. Download it →

The Clinic Operator’s Toolkit — price-and-margin review, payment-rail map, weekly owner brief, bleed diagnostic — is finishing up. Reply “toolkit” for the founding-price list.

And tell us: if you run pay-then-book, what did your booked-appointment count do, and what did your completed count do? Hit reply. We read everything.

— Devin & Ryan

Who writes this. Devin Casey, MBA and Ryan Arvizo, FNP-C. We operate Revive Medical Care, a cash-pay practice in Phoenix, and BioPeakRx, a LegitScript-certified telehealth platform. That’s why this brief is about compounding supply chains, payment rails and documentation — we run them, and we usually get the decision wrong once before we write it up. When we have a stake in something we mention, we say so in the same sentence. Who we are, and what we own →

The Clinic Brief is business and regulatory information, not legal or medical advice. Talk to qualified healthcare counsel about your specific situation.