MedSpa Compliance: The Med Spa Industry Has a Medical-Practice Problem
Medical spas aren't just medical aesthetics businesses anymore.
Look at the average med spa menu today and you'll still find the things you'd expect: tox, filler, microneedling, lasers, chemical peels and skin treatments. But keep scrolling, and you're now just as likely to encounter semaglutide or tirzepatide, hormone replacement therapy, testosterone therapy, IV infusions, NAD+, peptides, sexual wellness, functional medicine and an ever-growing list of treatments that have very little to do with the traditional definition of a cosmetic practice.
The evolution itself isn't necessarily the problem.
The problem is that many med spas have expanded their service menus much faster than they've expanded the medical infrastructure required to support them. For med spa owners, that creates an increasingly complicated compliance and operations problem: the clinical systems behind the business have to evolve along with the treatments being offered.
A September 2026 review by Whelth Research analyzed the published service menus of 14,748 U.S. med spas and found that 57.3% advertised at least one medical intervention, including medical weight loss, IV or NAD+ therapy, hormone therapy or peptides. Medical weight loss alone appeared on 40.1% of the med spa websites reviewed. For perspective, medical weight loss appeared more frequently than Sculptra, lip filler or laser resurfacing in the same dataset.
That should get every med spa owner's attention, because somewhere along the way, the industry's business model changed. The traditional med spa is increasingly becoming a hybrid between an aesthetics business, a wellness clinic and a medical practice.
The question is whether the systems behind those businesses are changing with it.
Adding a Medical Service Is Not the Same as Adding Another Treatment
There is a fundamental operational difference between adding a new cosmetic treatment and adding prescription medicine.
If your practice adds a new laser, there is plenty of work involved. You need to evaluate patient demand, analyze ROI, purchase the device, establish protocols, train the team, create consents, determine pricing and figure out how the treatment fits into your existing treatment plans.
Now compare that with launching a medical weight-loss program. You're potentially dealing with patient evaluation, prescribing authority, diagnosis, medication sourcing, pharmacy relationships, medical history, contraindications, medication interactions, laboratory testing when clinically indicated, titration, follow-up, adverse events, patient education, self-administration, documentation, state-specific scope-of-practice rules and ongoing medical management.
Those are very different operational responsibilities, and the same principle applies when practices expand into hormone therapy, testosterone management, peptide programs or other areas of medical wellness.
These are not simply services. They are medical programs.
That distinction matters because a medical program requires more than a treatment protocol and a price on the menu. It requires an infrastructure capable of supporting clinical decision-making before, during and after the patient's visit.
The Data Raises an Important Medspa Compliance Question
One of the most interesting findings in the Whelth report wasn't how many med spas offered medical services. It was what wasn't appearing alongside them.
Among the 8,444 med spas whose websites listed at least one medical intervention, 93.1% did not list blood testing as a service on their published menu, and 86% did not list any of the diagnostic services captured by the study. Among practices advertising medical weight loss, 92.2% did not list blood testing.
Before we turn that statistic into something it isn't, there is an important caveat: this does not mean 93% of these med spas aren't ordering or reviewing appropriate labs. Whelth's researchers are explicit about that limitation. Their analysis looked at what practices publish on their websites, not what happens inside the exam room. A practice may use outside laboratories, require testing without marketing it as a service, obtain outside records or have clinical protocols that simply don't appear online.
But the statistic still raises a worthwhile industry question.
As med spas move deeper into medical wellness, is the clinical infrastructure keeping pace with the marketing?
That is the conversation practice owners should be having. Not because every patient needs the same laboratory panel, not because there is one universal way to structure a wellness program, and certainly not because every med spa offering medical services is doing something wrong. The issue is that prescribing and longitudinal medical management demand a different level of infrastructure than simply adding another item to a treatment menu.
GLP-1s Are a Perfect Example
Medical weight loss may be the clearest illustration of how quickly this industry has changed. A few years ago, weight-loss medication was not a standard med spa offering. Today, according to the Whelth analysis, four out of ten med spas reviewed advertise medical weight loss.
At the same time, the regulatory and sourcing environment surrounding GLP-1 medications has become significantly more complex. The FDA continues to warn practitioners and consumers about unapproved GLP-1 products and emphasizes that compounded drugs are not FDA approved or reviewed by FDA for safety, effectiveness or quality before marketing. FDA has also stated that compounded drugs should generally be used when a patient's medical needs cannot be met by an FDA-approved product.
The agency has specifically stated that retatrutide and cagrilintide cannot currently be used in compounding under federal law, and neither is currently a component of an FDA-approved drug. FDA has also raised concerns about dosing errors involving compounded injectable semaglutide, semaglutide salt forms, improper refrigeration during shipping, fraudulent compounded products and multidose vial handling.
You can learn more about the retatrutide compliance landscape here:
As of May 31, 2026, FDA reported receiving 990 adverse-event reports associated with compounded semaglutide and more than 730 involving compounded tirzepatide, while also cautioning that those reports do not necessarily establish that the compounded medication caused the event.
This is why a GLP-1 program cannot simply be: find a pharmacy, set a price, post on Instagram and start selling.
Medication sourcing alone deserves due diligence. Then comes patient selection, prescribing, education, dosing, follow-up, documentation and adverse-event management. You also need a plan for what happens when the patient reaches goal weight, stops responding, disappears for several months, develops symptoms, or receives medication from a pharmacy that changes formulation or concentration.
That's a medical program. Your systems should reflect that.
The Same Problem Exists With Hormones, Peptides and Longevity
GLP-1s may be getting the most attention, but they aren't the only example. Whelth found that among the med spas reviewed, 21% listed hormone therapy, 11.4% listed peptide therapy, and 38.3% listed IV or NAD+ therapy.
Practices are only moving further in this direction. The aesthetics industry is increasingly overlapping with longevity medicine, metabolic health, sexual wellness, regenerative medicine and hormone optimization. From a business perspective, the appeal is obvious. Many of these services create recurring relationships rather than episodic treatment visits, and they lend themselves to memberships, longitudinal care and increased patient lifetime value.
You can learn more about peptide compliance here:
But recurring revenue often means recurring clinical responsibility.
The patient receiving tox three times a year and the patient whose prescription you manage every month are fundamentally different relationships. One is largely episodic. The other can involve ongoing assessment, monitoring, refills, changes in therapy, side-effect management and decisions about whether treatment should continue at all.
Your operating model needs to recognize that difference.
The Missing Piece Isn't Usually Another Treatment
When practice owners ask how they can grow, one of the first instincts is often to ask what else they can add. Another device. Another injectable. Another wellness service. Another peptide. Another membership. Another revenue stream.
Sometimes the better question is whether the practice has fully built the infrastructure behind what it is already offering.
This is where I repeatedly see practices underestimate the work. The medical service exists. The price exists. The marketing exists. Patients are booking. Then we start asking the operational questions.
Who is responsible for the initial medical evaluation? Who determines medical eligibility? What does the intake capture? What clinical documentation is required? Which provider can prescribe in your state and under what authority? When are labs required according to your clinical protocol, who reviews them and where is that documented? What constitutes an abnormal finding requiring referral? How often is follow-up required? What symptoms trigger escalation? What happens after hours?
Then there are the medication and workflow questions. Where is the medication sourced? Who verifies pharmacy licensure and dispensing requirements? What happens if a pharmacy changes concentration? How is self-administration taught and documented? How are adverse events handled? What standing orders or clinical protocols support the program? What can your front desk explain, and what crosses the line into clinical advice? How are marketing claims reviewed? What happens when a patient disappears for six months and then requests a refill?
Those aren't theoretical compliance questions. They are operating-system questions.
Every practice offering longitudinal medical care needs answers to them.
How to Audit Your Medspa's Medical Infrastructure
If your aesthetics practice now offers, or plans to offer, medical wellness, start by auditing the foundation rather than simply adding another service to the menu.
At minimum, evaluate:
Ownership and practice structure: Does the entity structure comply with the laws governing medical practice in your state?
Prescribing authority: Who evaluates and prescribes, and are the appropriate licenses, collaborative relationships or practice authorities in place?
Patient evaluation: What medical evaluation occurs before treatment or prescribing?
Clinical protocols: Do you have written protocols for eligibility, contraindications, monitoring, dosing, follow-up and escalation?
Laboratory and diagnostic processes: What testing is clinically indicated, who orders it, who reviews it and how is follow-up documented?
Medication sourcing: Have you performed appropriate due diligence on the pharmacy, medication source and applicable compounding requirements?
Consent and patient education: Do patients understand risks, benefits, alternatives, medication status and self-administration instructions where applicable?
Documentation: Does your EMR workflow support the medical program rather than simply documenting a cosmetic transaction?
Staff scope and delegation: Does every team member understand what they may and may not do?
Emergency and adverse-event protocols: What happens when something goes wrong?
Ongoing management: What are the requirements for refills, reassessment, continuation, discontinuation and maintenance?
Marketing: Are your website, social media and advertising claims consistent with the actual program and applicable laws?
Privacy and communication: Are protected health information, electronic communication, telehealth and patient records being managed appropriately?
Billing and memberships: Are recurring charges structured clearly and independently from medical eligibility or prescribing decisions where necessary?
The exact requirements will vary by state, service, provider type and medication.
That's precisely why copying another practice's program is not a compliance strategy.
You can book a free medical infrastructure audit here:
Growth Without Infrastructure Is Just More Risk
I am not anti-GLP-1, anti-hormone therapy or anti-peptide. And I am certainly not against med spas expanding into broader areas of health and wellness when they have appropriately qualified clinicians and legally compliant models. In fact, this evolution may represent one of the biggest growth opportunities medical aesthetics has seen.
But opportunity and responsibility grow together.
The industry is getting larger. AmSpa now describes U.S. medical aesthetics as a $17-billion-plus industry growing by more than $1 billion annually. Practices themselves are also becoming more sophisticated. A separate 2026 analysis highlighted by AmSpa found median revenue among participating aesthetics businesses increased 19.2% year over year even though median new-patient growth was only 1.2%, suggesting that growth is increasingly coming from deeper, longer relationships with existing patients rather than simply acquiring more people.
Wellness fits perfectly into that model. But if you're going to build longer medical relationships with patients, you have to build the systems capable of supporting them.
A med spa offering tox, filler and facials can no longer simply bolt a medical weight-loss program, hormone therapy and peptides onto the side of the business and assume the same infrastructure will work. At some point, you have to acknowledge what the practice has become.
A medical practice.
It may be wrapped in beautiful branding. It may have memberships, sell skincare and still generate a large percentage of its revenue from injectables and devices. But when you're evaluating patients, prescribing medications and managing their health over time, the medical side of the business cannot be treated like just another revenue category.
The industry's service menus have evolved rapidly. The next phase of growth requires the infrastructure behind them to evolve just as quickly.
Your service menu has evolved. Make sure the practice behind it has evolved too.
This article is for general educational and operational-planning purposes and is not legal or medical advice. Medical-practice ownership, prescribing, delegation, telehealth, compounding and scope-of-practice requirements vary significantly by state and should be reviewed with appropriately qualified legal and clinical professionals.
Comments