Opening a Med Spa: The First 90 Days of Marketing

Marketing a new med spa is a sequence, not a list: each step clears the one behind it. In North Carolina, who owns the practice and who performs a laser treatment decides which services you can advertise at all, a signed authorization gates the first before-and-after photo, and reviews accrue slowest.

Every rule, Google policy and industry figure below is as of September 2026 and comes from the document named beside it. Educational marketing guidance, not legal or medical advice.

Why the order decides the outcome

The order decides the outcome because the early steps are prerequisites rather than parallel tasks. The treatment menu you can lawfully offer sets the pages and ads you can write, the consent form has to exist before the photograph you want in month three is taken, and review recency cannot be bought late.

A practice that spends week one on a logo and week ten on its consent paperwork opens with a menu it cannot photograph and a profile nobody has reviewed.

Days 1 to 14: who owns it, and who is allowed to perform it

Ownership and supervision come first because they set the menu. The North Carolina Medical Board's position statement on the corporate practice of medicine, amended September 2025, says that "businesses practicing medicine in North Carolina must be owned in their entirety by persons holding active North Carolina licenses," or by one of the combinations permitted in state law.

The statement never uses the words med spa. It applies to any business engaged in the practice of medicine, does not define which aesthetic services count, and is a position statement rather than a statute. It adds that the Board may seek injunctive relief against lay owners.

The laser statement decides your opening menu. The Board's position is that structural alteration of human tissue using laser technology is surgery, that laser hair and tattoo removal should be performed only by a physician or by an individual a physician has designated as adequately trained, and that each patient be examined by a physician, PA or nurse practitioner before the first such treatment.

So the ad set and the treatment pages are written against the staff roster rather than the equipment list. A page selling laser hair removal is marketing a service the Board expects somebody specific to stand behind.

Days 1 to 21: the Business Profile, named the way Google requires

The Business Profile gets claimed and verified early because every other channel points at it. Google's guidelines say the name must reflect the real-world name used on your storefront, website and stationery, and must not include marketing taglines, service or product information, or location information. Unnecessary information in a name, Google says, could result in suspension.

That rules out the name a new practice reaches for first: the city, plus a treatment list, plus a tagline. A profile suspended in week three is a launch spent on appeals.

Days 1 to 30: the consent paperwork that gates your best content

The authorization form comes before the first treatment you want to photograph, because consent cannot be collected retroactively. If the practice is a HIPAA covered entity, 45 CFR 164.508 requires a valid signed authorization before protected health information is used for marketing, and treatment may not be conditioned on signing one.

The rule lists what makes one valid: a specific description of what may be used, who receives it, each purpose, an expiration, a signature and date, and notice of the right to revoke. A checkbox meets none of that.

Put the messaging consent on the same form. Under 47 CFR 64.1200, prior express written consent means a signed agreement authorizing the messages and naming the number they go to. Every later reminder sequence sits on that signature.

Days 1 to 90: the review ask, worded the same way every time

Reviews start in week one because they take the longest and they decay. Google's local ranking page says local results rest mainly on relevance, distance and prominence, that prominence is partly based on how many reviews you have, and that there is no way to request or pay for a better local ranking.

Nothing about the ask may vary with the sentiment you expect. 16 CFR Part 465 makes it a violation to provide incentives conditioned, expressly or by implication, on a review expressing a particular sentiment, and it reaches reviews procured from employees, agents or their immediate relatives. Generalized solicitations to purchasers are carved out.

Recency is the part a new practice underrates. One expert contributor to Whitespark's 2026 Local Search Ranking Factors report, published November 2025, put it this way: "It's not an overall numbers game; it's a recency/frequency game."

Days 30 to 90: the booking path, then the treatment pages

A new med spa's booking path has one job in the first quarter: turn a tap into a kept appointment, and route a first-time laser patient into a consult rather than straight into a treatment slot. The Board expects an examination before that first laser hair or tattoo removal treatment, so the calendar has to know the difference.

Treatment pages come after the booking path exists, one per service the roster can actually deliver, because a page is only as good as the slot it points at. Content pays slowest and is funded last.

What not to buy in the first 90 days

Nothing that multiplies volume belongs in the first quarter, because the multiplier is your consult-to-treatment rate and you do not know it yet. The percentage benchmarks do not help on day one either: a share of revenue is meaningless in a month with no revenue to take a share of.

For context rather than a target: AmSpa's 2024 State of the Industry Report, as reported by the association in May 2025, puts the average med spa's marketing investment at about 7% of revenue, inside a 2% to 15% range. Growth99's 2026 report, published by AmSpa, found 52% of practices under $2,500 a month.

• A rebrand. Nobody is deciding against you on the logo in month two.
• A second paid channel, before the first has produced a month of booked-consult data.
• A content retainer, before the treatment pages and the booking path exist for it to point at.

What is worth buying early is measurement: one place where every call, form and booking lands with its source attached, so the quarter ends in booked consults by channel.

What does the first 90 days look like when the system runs it?

Owners opening a practice ask for automated booking systems and for HIPAA compliance across digital forms, CRM automations and ad landing pages, and in a launch quarter those are the same job: the booking flow decides what a tap becomes, and every form behind it decides where patient information lands.

Mirastart builds that half: live-availability booking that sends a first-time laser patient to a consult slot and a returning one to a treatment slot, instant automated reply on an inquiry landing at 9pm on a Saturday, reminder sequences running on consent captured at intake, treatment pages carrying no third-party tracking, and reporting in booked consults. A business associate agreement is signed where an engagement genuinely touches protected health information, and the practice stays the covered entity.