By Sumit Nautiyal, Founder · 7 min read · updated 8 September 2026
Meta ad policies for Botox and aesthetics
Short answer
Meta treats cosmetic procedures as a restricted category. Before-and-after imagery is prohibited outright, as is copy implying a negative self-perception. Most med spa creative breaks at least one of these. The costlier mistake is tracking — a pixel on a booking page that captures treatment selection is a genuine HIPAA exposure, not just a policy problem.
Restricted, not banned
Aesthetic treatments can be advertised on Meta. They sit in a restricted category, which means the rules are narrower than most advertisers assume and enforcement is uneven enough to be misleading.
Uneven enforcement is the trap. An ad that breaks policy may run for weeks before anything happens. Operators reasonably conclude it is allowed, scale it, and discover the rule at the worst possible moment — when the account is restricted rather than the single ad rejected.
The three that catch almost everyone
Before-and-after imagery is prohibited. Not discouraged. Not sometimes. Meta’s advertising policies prohibit before-and-after images for cosmetic procedures, and that is the single most common violation in this category, because it is also the most persuasive creative a practice owns. Split-screen composites, sliders, carousels showing progression — all of it.
Copy cannot imply a negative self-perception. Meta’s personal attributes rules mean an ad may not imply it knows something about the viewer’s body or state. “Tired of your lines?” and “Hate your jawline?” both fail. The workaround is not clever phrasing — it is describing the treatment rather than the viewer’s supposed problem.
Health claims need to be defensible. Outcome language attracts both Meta review and FTC substantiation rules. “Removes wrinkles permanently” is a different claim from “a neuromodulator that temporarily reduces the appearance of fine lines”, and only one of them is safe.
What to run instead
Creative that performs and stays inside the rules tends to share a shape:
- The provider, not the patient. Injector-led video explaining what a treatment involves converts well and sidesteps the imagery problem entirely
- The room. Interior, equipment, staff — trust signals in a category where people are nervous about safety
- A specific, dated offer. Not “look your best” but “consultations this month, priced at X”
- Process explanation. What the appointment is like, how long it takes, what recovery involves
That last category also happens to be what AI engines extract from most reliably, so the same asset works on two surfaces — the reasoning is in Google Business Profile for AI search.
The expensive mistake is tracking, not creative
A rejected ad costs a day. A pixel misconfiguration can cost considerably more.
Do not place a Meta pixel on any page that captures patient information or treatment selection. A booking flow where someone picks “Botox” and enters their details is, once a pixel fires on it, transmitting health-adjacent data to a third party. There has been real enforcement against healthcare providers over exactly this pattern.
Practical position:
- Pixel on general marketing pages: fine
- Pixel on a booking page that captures treatment or patient details: do not
- If an agency tells you otherwise, ask them to put it in writing
This is worth being stubborn about. The marketing upside of that one event is small; the downside is a regulatory problem, and it is your practice’s name on it, not the agency’s.
Google is a separate rulebook
Google Ads has its own healthcare and medicines policies, and they do not map cleanly onto Meta’s. A creative set cleared for one is not cleared for the other.
Check per treatment before writing the copy rather than after rejection — the appeal cycle costs more time than the check does. Broadly, Google is more permissive on imagery and stricter on claims; Meta is the reverse.
If your account is already restricted
Do not create a new ad account. Running a second account to escape a restriction is itself a violation and turns a recoverable problem into a permanent one.
The recovery path is unglamorous: remove the offending creative, request review, and wait. Practices that appeal without fixing the underlying creative tend to get the same answer twice.
The order that avoids all of this
- Audit existing creative against the three rules above. Most practices find at least one violation.
- Check where your pixel fires. If it is on a booking page capturing treatment selection, remove it today.
- Rewrite copy to describe the treatment, not the viewer.
- Build a provider-led creative library so you are not reaching for before-and-afters under deadline.
- Check Google’s policy separately for each treatment you intend to advertise.
Paid ads and AI visibility solve different halves of the same problem — ads capture demand that already exists, and being named in an assistant’s answer captures demand that has not reached a search box yet. The distinction is covered in AEO, GEO and SEO: what the terms actually mean.
The category-specific version is on Meta ads for med spas.
The caveat
Platform policies change, enforcement changes faster, and the wording above reflects the position as we understand it in September 2026. Nothing here is legal advice, and the HIPAA point in particular is worth putting to your own counsel rather than to an agency.
What does not change is the shape of the risk: the creative that most wants to break the rules is the creative that works best, which is exactly why practices keep running it.