Med Spa Marketing: How to Grow Without Breaking Advertising, Privacy or Licensing Rules

A med spa sits between beauty and medicine, and its marketing has to respect both. Clients choose you for the results and the experience, just like a salon. But the treatments involve prescription drugs, medical devices and licensed providers, which brings rules a hair salon never has to think about: advertising law, drug and device rules, state licensing and patient privacy.

This guide covers how to market a med spa well within those rules. It is general guidance, not legal advice. Med spa rules vary widely by state and change often, so have your marketing reviewed by a healthcare attorney who knows your state, and involve your medical director.

Every claim needs proof

The Federal Trade Commission's standard applies to all advertising: claims must be truthful, not misleading and backed by evidence. For health-related claims, the FTC's guidance on health products says the evidence generally needs to be competent and reliable scientific evidence. That is a high bar, and it applies to your website, your social posts, your ads and what your staff write in DMs.

Testimonials and reviews you feature are claims too. The FTC's Endorsement Guides say an ad that shows a client's experience will likely be read as showing what people generally get. If that result is not typical, the ad needs to clearly disclose the results people can generally expect, and you need evidence for that too. The Guides are also clear that testimonials are not themselves scientific evidence that a treatment works.

Brand names, drugs and devices

Botox is a brand name: a registered trademark of Allergan for a prescription drug, onabotulinumtoxinA. Dysport, Xeomin and Jeuveau are different products with their own names. Using brand names carefully is honest with clients and protects you:

• Use a brand name only for that brand. If you inject Dysport, do not advertise it as Botox.
• Do not use a brand name as a generic word for a category, as in "Botox" for every wrinkle relaxer you offer.
• Describe the category in plain words when you mean the category: "wrinkle relaxers" or "neuromodulators".
• Follow the manufacturer's brand guidelines if you take part in its programs.
• For devices, describe the uses the device is cleared or approved for, not others.

Weight-loss treatments need particular care. In September 2025 the FDA sent dozens of warning letters to companies marketing compounded GLP-1 drugs, objecting among other things to claims that compounded products are the same as, or generic versions of, FDA-approved drugs. Compounded drugs are not FDA-approved. If you offer them, do not describe them as FDA-approved or as the same as a brand-name product.

Who may perform, and advertise, what

Which professionals may perform injections, laser treatments or medical-grade peels, under what supervision, and how they may describe themselves, is set by state law and state boards: medical, nursing and cosmetology. The answer differs from state to state and treatment to treatment.

• Describe each provider accurately by license, such as "Alexis Kim, RN", and only advertise a role your state allows them to perform.
• Never call anyone a doctor or a dermatologist unless they are one, and be careful with words like "specialist" or "board certified", which carry specific meanings.
• Make sure what your website says about supervision matches how your practice actually runs.
• Check whether your state has rules about how licensed professionals advertise, such as naming the license type in ads.
• If a treatment requires a medical evaluation, say so: "Every treatment starts with a consultation with a licensed provider."

Before and after photos, done right

Before and after photos are the most persuasive thing a med spa can show, and the most sensitive. A photo of a treatment area is personal, and in a medical practice it can be protected health information.

• Get specific written consent for marketing use: which photos, which channels (website, social, ads), whether the face shows, and how to withdraw consent later.
• If your practice is a HIPAA covered entity, using patient information for marketing generally needs the patient's written authorization. Ask your attorney whether HIPAA applies to you; some states have their own medical privacy laws too.
• Show typical results. Choose photos that represent what clients generally get, not only your best case, or clearly disclose what people can generally expect.
• Same light, same angle, same distance, no retouching. Changing the lighting or editing the after photo misleads.
• Label the details: the treatment, the number of sessions and how long after the last session the photo was taken.
• Remove photos promptly if a patient withdraws consent.

Keep health information out of marketing

The safest rule is simple: your marketing should never reveal that a specific person is your patient, or what they had done, unless they have agreed in writing.

• Texts and emails: keep them general. "It's a good time to book your next visit" rather than naming a treatment. Messages show up on lock screens and shared devices.
• Lists and segments: be careful building marketing lists from treatment history. For a HIPAA covered entity, that can be a use of health information for marketing.
• Review replies: never confirm that someone is a patient or discuss their treatment, even if they mention it first. Thank them warmly and generally.
• Social media: do not tag or name patients without consent, and do not reply to comments with details of anyone's care.
• Tracking pixels and ad platforms: be careful about sending information on which treatment pages a visitor viewed to advertising platforms. Regulators have taken action against health businesses over tracking technology, so ask your attorney before you set it up.

Our email and text marketing guide covers the consent and opt-out rules for marketing texts, which apply to med spas as well.

Marketing that works, within the rules

• Education: what a treatment is, who it suits, what recovery looks like, how many sessions are typical and what it costs. Honest information builds trust and attracts clients who are a good fit.
• Meet the providers: photos, credentials and experience, accurately stated.
• Consultations: make the consultation the call to action, not the treatment itself.
• Reviews: ask every client for an honest review, never offer anything in exchange, and reply without health details. Our reviews guide covers Google's rules.
• Events: an open house or a skincare evening, with clear terms for any offer.
• Local search: a page for each treatment, a complete Google profile and an accurate category. Our local SEO guide explains the rest.

Offers, packages and financing

Promotions are common in med spas and fine when they are honest. Say exactly what is included, any limits, the end date and who qualifies. Be clear about units and syringes: a "from" price per unit is clearer than a headline price that only applies to a very small treatment. If you advertise financing, federal lending rules can require specific terms in the ad once you mention certain details, so check with your financing provider.

A quick checklist before you publish

1. Is every claim true, typical and backed by evidence we can show?
2. Are brand names used only for those exact products?
3. Is every provider described accurately by license, for treatments our state allows them to perform?
4. Do we have written consent for every patient photo and testimonial?
5. Does anything reveal a patient's identity or treatment without written permission?
6. Has our attorney or medical director reviewed new treatment pages and ads?