Before-and-After Photos, Reviews, and Ads: What Marketing Compliance Actually Requires

Marketing and compliance usually get built by different people on different timelines — a practice hires a marketing agency or handles social media in-house, while the clinical and legal structure gets set up separately. That gap is where a lot of exposure quietly builds up, because some of the most effective med spa marketing — before-and-after photos, patient testimonials, targeted ads — touches protected health information and advertising rules that most marketers aren’t trained to think about.

Before-and-After Photos Need Their Own Consent

A general treatment consent form doesn’t automatically authorize using a patient’s photo for marketing. That requires a separate, specific authorization — ideally documenting exactly where the photo may be used (website, Instagram, a specific ad campaign), for how long, and confirming the patient can revoke it. Practices that skip this step are relying on an informal “they seemed fine with it” understanding that doesn’t hold up if a patient later objects.

Testimonials and Reviews Have Their Own Rules Too

Incentivizing patients to leave reviews, without disclosing that incentive, can run afoul of FTC guidelines on endorsements. Testimonials that make specific outcome claims — “lost 30 pounds,” “looked ten years younger” — can also trigger advertising standards that vary by state, particularly for medical treatments where results aren’t guaranteed and vary by patient.

The photo that performs best in an ad is often the one with the least documented permission behind it. That’s not a coincidence — it’s a sign the consent process got skipped in the rush to post it.

A Practical Marketing Compliance Checklist

• Separate, specific written consent for any patient photo or story used in marketing
• Clear disclosure any time a review or testimonial was incentivized
• Outcome claims reviewed against your state’s advertising rules for medical or quasi-medical services, with appropriate disclaimers about individual results varying
• A process for honoring a patient’s request to remove their photo or story from active marketing
• Marketing team briefed on what they can and can’t claim about treatments, ideally with input from the medical director

This doesn’t mean marketing has to be timid — some of the strongest med spa marketing leans hard into real patient results. It just means the consent and disclosure work needs to happen at the same speed as the content does, not as an afterthought.

If you’re building out your marketing and want to make sure your consent and disclosure practices actually hold up, that’s exactly where we start every engagement.