Med spa social media: what to post and how to handle client photos

What to post: treatments, injectors, results, education

Plan the week around four themes, and tie each post to one treatment:

1. Treatments: what happens at a lip filler appointment, how a laser hair removal series is spaced, what microneedling recovery looks like day by day.
2. Injectors and providers: introductions with name, license and what they specialize in. Clients choose people.
3. Results: consented before-and-afters, with session count and time since treatment.
4. Education and pricing: "what does a unit mean," starting prices, how memberships work, who is a good candidate.

Some specifics that work for aesthetics:

• Show the room and the process, not only outcomes. A short video of a consult, numbing and aftercare answers the nervous first-timer's questions.
• Name the provider in every treatment post, with their credential.
• Post prices, or at least ranges with the unit. Clients research cost before they book.
• Answer one common question per week in a short video, and link the treatment page.
• Reuse your best posts as Meta ad creative later, since they've already shown what earns attention.

Keep claims modest. The FTC's health products guidance (opens in a new tab) applies to the net impression of a post, including images, so "no downtime" or "permanent" needs support. For a year of themes, see med spa content ideas. It all feeds the wider med spa marketing plan.

Client photos and videos: written consent

If HIPAA applies to your practice, a client's photo or video used to promote your spa needs a written authorization under 45 CFR 164.508 (opens in a new tab). A valid authorization describes the images, who may use them, the purpose (for example "Instagram, Facebook and our website"), an expiration date or event, the client's signature and date, and the right to revoke.

If HIPAA doesn't apply, written consent is still the right call. The FTC says using health information for advertising without affirmative express consent (opens in a new tab) may be unfair, and Washington's My Health My Data Act (opens in a new tab) covers health data outside HIPAA. Ask counsel which state laws on using a person's image apply where you practice.

Set up a simple process:

1. Ask before the photo is taken, not after the result looks good.
2. Use a separate marketing consent form, not a line in the treatment consent.
3. Record what was agreed: face shown or cropped, platforms, tagging, captions.
4. Store the form where you can find it if the client revokes.
5. Remove posts promptly on revocation, and note the date.

Our HIPAA social media rules guide covers the authorization form in more detail.

Platform rules on cosmetic and body content

Instagram and Facebook follow Meta's Community Standards for posts and its Advertising Standards for ads, both checked October 22, 2026.

Organic posts. Meta's Adult Nudity and Sexual Activity standard (opens in a new tab) allows photos of post-mastectomy scarring and may allow nudity in medical or health contexts, sometimes behind a warning label. Visible genitals are not allowed, and visible female nipples are restricted outside breastfeeding and protest contexts. Plan body-contouring and breast-adjacent before-and-afters with that in mind: crop, use garments, and expect labels.

Ads and boosted posts. Once you pay to promote a post, it's an ad. Meta's Health and Wellness policy (opens in a new tab) requires cosmetic procedure ads to target people 18 or older. It permits before-and-after transformations for cosmetic procedures, and bans statements of inferiority about appearance and close-ups pinching fat in weight-loss ads. Its Drugs and Pharmaceuticals policy (opens in a new tab) requires LegitScript certification and Meta's authorization for ads that promote prescription drugs, which covers neurotoxin and GLP-1 promotions. Our med spa Facebook ads guide covers this in depth.

Comments and DMs: privacy and medical-advice limits

Under HIPAA, "health information" includes information about the provision of health care to an individual (opens in a new tab). So if HIPAA applies to you, a public reply that confirms someone is your client can disclose protected information. Set house rules:

• Never confirm someone is a client in a public reply, even to thank them.
• Use a neutral reply to any review or comment: "Thanks for reaching out. Please call us at [number] so we can help."
• Move health questions to a consult. Give general information in comments; don't assess someone's photo or recommend a dose.
• Keep health details out of DMs. Ask the person to use your secure consult form or call.
• Don't argue or reveal treatment details in response to a complaint.

Reviews have their own rules. The FTC's Consumer Reviews and Testimonials Rule (opens in a new tab) bans fake reviews, suppressing negative ones and rewarding reviews conditioned on being positive.

Creators and influencers: disclosure

A creator who gets paid, or gets a free or discounted treatment, is endorsing you. The FTC's Disclosures 101 for influencers (opens in a new tab) and its Endorsement Guides FAQ (opens in a new tab) set the rules:

• The disclosure goes in the post or video itself, where it's hard to miss, not in a bio or comment.
• Plain words work: "ad," "sponsored," or "Thanks to Lakeview Aesthetics for my free treatment."
• Videos need it in the video, and live streams need it repeated.
• Creators can't talk about a treatment they haven't had.
• Your staff are endorsers too when they post about your spa.

Before any creator partnership, put it in writing: the disclosure wording, the claims they may and may not make, the consent form they sign as a client, and who owns the content. Practices doing surgical work should compare notes with plastic surgery Instagram practices.

Boosting posts vs running ads

A boost turns one post into an ad in a few taps. Ads Manager gives you full control of audiences, placements, budgets and testing. Use each for what it does well:

Common mistakes

• Boosting a before-and-after to an audience that includes under-18s.
• Posting a client photo with consent only on the treatment form.
• Answering clinical questions in comments.
• Captions that promise "permanent" or "painless" results.
• Creator posts with "#collab" instead of a real disclosure.

Where Medfy fits

Medfy does not post to social media for your practice. Its free audit does score your social presence alongside your website, SEO, Google listing, AI visibility and ads. For paid reach, the Meta ads + AI creatives add-on ($199/month) runs on-brand static ads in every format, made from your website, with copy written for healthcare ad policies and testing that rotates ads as they tire. Ad spend is paid directly to Meta, never marked up.

Frequently asked questions

What should a med spa post on Instagram?

Post what clients want to know before booking: who your injectors and laser providers are, what each treatment looks like from consult to recovery, honest before-and-after results with consent, prices and memberships, and short answers to common questions. Rotate those themes each week and tie each post to a treatment page on your site. Keep medical advice general and send personal questions to a consult.

Can med spas post client before-and-after photos?

Yes, with the client's written consent. If HIPAA applies to your practice, marketing use of a client's photos needs a signed authorization under 45 CFR 164.508 that names the use. If it doesn't, get written consent anyway, because the FTC Act and state laws can still apply. Show typical results, don't retouch, and keep the client's identity out of captions unless they agreed to it.

Should a med spa use influencers?

It can work for treatments people like to see on real people, such as lip filler or HydraFacial, if the creator actually has the treatment and discloses the relationship. The FTC's Endorsement Guides require a clear disclosure in the post itself whenever a creator is paid or gets free or discounted treatment. Get a written agreement covering disclosure, claims and the client consent forms you need.