Med Spa Facebook Ads: What Meta's Rules Actually Allow in 2026

Med spa Facebook ads run under Meta's Advertising Standards, which as of September 2026 file cosmetic procedures under a restricted Health and Wellness category: audiences must be 18 or older, before-and-after transformations are permitted inside that restriction, prescription injectables fall under a separate drugs standard, and copy may not imply anything about the reader's age, health, or appearance.

The four Meta standards that decide a med spa ad

Four of Meta's Advertising Standards do most of the work on a med spa account as of September 2026: Health and Wellness (cosmetic procedures and body-image language), Drugs and Pharmaceuticals (anything that is a prescription product), Privacy Violations and Personal Attributes (copy that describes the reader), and the review and enforcement rules in the standards' introduction.

Meta's introduction states that the advertiser is responsible for complying with its standards and with all local laws and regulations, so an approved ad is not a legally cleared ad.

Before-and-after images: permitted, with conditions

As of September 2026, Meta's Health and Wellness standard permits ads for general cosmetic products, procedures and surgeries depicting a before-and-after transformation, on one condition, in the standard's words: "Ads promoting or marketing cosmetic products, procedures or surgeries, must be targeted to people at least 18 years or older." The older Personal Health and Appearance page, which our own before-and-after photo post still describes as banning the images, no longer resolves.

The conditions are specific. The same standard prohibits statements of inferiority about physical appearance, negative terms or questions attacking a person's appearance, body parts or hygiene; close-ups on a body area by pinching fat; and clickbait in a health or weight context, which Meta defines to include promises of specific outcomes within a set timeframe without disclaimers or qualifiers. A photo captioned with the treatment, the interval and a typical-results qualifier clears all three.

Weight-loss imagery has its own rule: Meta's Suicide, Self-Injury and Eating Disorders standard prohibits side-by-side before-and-after weight loss or gain not related to the use of a product or service, so a GLP-1 program ad has to visibly be about the program. Meta's permission changes nothing for the privacy and FTC layers.

Injectables by brand name: the drugs standard

Meta's Drugs and Pharmaceuticals standard, as of September 2026, allows prescription drug promotion only by advertisers actively certified by LegitScript or cleared through Meta's internal review, targeting people 18 or older in the United States, Canada or New Zealand, with a disclaimer to consult a licensed health professional. The advertisers it names are online pharmacies, telehealth providers and pharmaceutical manufacturers. A med spa is none of those.

Botox Cosmetic, Dysport, Xeomin and the GLP-1 medications are prescription drugs, whose promotion the FDA's Office of Prescription Drug Promotion regulates federally, and the standard's text does not carve out clinics that administer them. Whether an ad naming a brand is promoting the drug or the service is a question the page does not answer; the review that decides it is primarily automated.

The shape that clears review describes the treatment and the visit: neuromodulator appointments, a consult with a named injector, what a first visit involves. The brand belongs on the landing page and in the consultation; per-unit brand pricing in ad copy is the version most exposed.

Copy that describes the reader

Meta's Privacy Violations and Personal Attributes standard prohibits ads that assert or imply a person's personal attributes, including medical information and age, as of September 2026. Its stated fix is that ads should focus on the benefits of the product or service being advertised.

Meta's own examples of what fails include an ad asking whether the reader has diabetes and one asking whether they are ready to upgrade their skin to look younger, the second listed under age. Every tired-of-looking-older headline is that example with different nouns. Write about the treatment, the provider, the visit and the result, never about the person reading.

Targeting: what Meta removed and what is left

Meta removed detailed targeting options tied to health causes, sexual orientation, religion and political beliefs starting January 19, 2022, with examples including lung cancer awareness and chemotherapy. Combined with the 18-plus requirement on cosmetic ads, a med spa in 2026 targets on geography, an age floor and its own first-party audiences. That is enough.

Meta's announcement pointed advertisers at the alternatives that still work: engagement and website custom audiences, customer list uploads, lookalikes, and location targeting for physical businesses. For a Charlotte practice that means a radius around the door, whether SouthPark, Ballantyne or Lake Norman, an age floor above 18 when the treatment mix warrants it, and audiences built from past patients and site visitors.

One thing I could not verify from Meta's own pages this run: its Business Help Center article on data source categories in Events Manager would not load, so this post makes no claim about which events it restricts. Check your pixel's category there before optimizing to a booking event.

Review, rejection and the path back

Meta's ad review is primarily automated and typically completed within 24 hours, though it can take longer and ads can be reviewed again after they are live, as of September 2026. Review reads images, video, text and targeting, plus the landing page. A violation gets the ad rejected, and the Business Account or its assets may be restricted.

A restricted asset cannot be used to advertise across Meta's technologies. Meta's stated remedy for a rejection you believe is wrong is a review request in Account Quality; its ads review page lists the options as revising the ad, creating a new one, or requesting another review. Fix the thing named instead of resubmitting, and keep the landing page as clean as the ad, because it is inside the review.

The campaign shapes that clear review and still book

The ads that survive Meta's standards and book consults answer a prospective patient's questions: who injects, what a first visit involves, what a treatment realistically does, how to book. That is a lead campaign with a consult as the conversion, not a promo with a price as the hook; trust is the objection a first-time injectable patient has.

1. 1Provider introduction: the nurse injector or medical director, credentials, consult length. Passes every standard above; most spas never run it.
2. 2Treatment explainer: what neuromodulators or fillers do, the typical interval, realistic results with qualifiers, no brand name.
3. 3Before-and-after with the conditions met: 18-plus audience, signed authorization, typical-results language, no timeframe promise.
4. 4Consult offer: a bookable consult as the call to action, landing on the treatment's own page with real-time booking, measured on booked consults, not clicks.

The FTC still sits over the ad Meta approved

Meta approving an ad says nothing about whether it is lawful. The FTC's Health Products Compliance Guidance requires health claims to rest on competent and reliable scientific evidence, and states that testimonials reporting results more dramatic than users can generally expect are likely deceptive, adding that a results-not-typical disclaimer does not cure the deception. Meta's automated approval never checks that, HIPAA, or the North Carolina Medical Board's expectations.