Skip to content

Starting a practice · Checklist

How to open a med spa: rules, business plan and launch marketing

How to open a med spa: medical director and state rules, a business plan outline, licensing, insurance, HIPAA and a launch marketing plan that fits ad policy.

By Medfy Editorial TeamUpdated Facts verified 6 min read

How to open a med spa starts with a question most startup guides skip: is your planned business legal in your state? Ownership, the medical director's role and who may inject under whose supervision decide whether you can operate at all, so this checklist puts them first. Then come a business-plan outline, licensing and insurance, HIPAA, pricing, and launch marketing that respects the ad rules for prescription treatments.

Not legal, tax or financial advice. Requirements vary by state, province and profession. Confirm every item with your state medical board and a healthcare attorney.

The business-plan question is the most searched: "med spa business plan" gets 590 searches a month, "how to open a med spa" 210 and "how to start a med spa" 110. On the patient side, demand is large:

Patient search (US, monthly)SearchesAvg. CPC
med spa near me110,000—
laser hair removal near me110,000$16.94
lip filler near me74,000—

Google Ads Keyword Planner data via DataForSEO, US, 12-month average to Sep 2026.

Med spa rules start with your state

A med spa is a medical practice in a spa setting. That means medical-practice law applies.

Medical director, supervision and scope of practice

  • Define the medical director's role in writing: availability, chart review, protocols, on-site time, and liability.
  • Map who performs the initial assessment. AmSpa's guide treats the initial assessment (often called the good faith exam) as the practice of medicine and says only an MD, DO, NP or PA can perform it. Confirm for your state, including whether telehealth exams are allowed.
  • Map delegation for each treatment. AmSpa notes that "understanding delegation rules in your state is critical." For each service, list who may perform it and what supervision applies.
  • Write treatment protocols and standing orders the medical director signs.
  • Plan complication management: who is on call, and the escalation path for vascular occlusion or burns.

A med spa business plan outline

Use these sections; lenders and partners expect them.

  • Services and prices. Your launch menu, and what each treatment includes.
  • Provider model. Owner, medical director, injectors, laser operators, and the supervision rules your attorney approved.
  • Startup costs by category: legal and licensing, lease and build-out, devices, first inventory, insurance, software, staff before opening, marketing, working capital. Use local quotes; label anything else as an assumption.
  • Monthly fixed costs and a break-even calculation.
  • Marketing plan with a budget per channel and how you'll measure new patients.

Hypothetical arithmetic (assumptions, not benchmarks). Suppose monthly fixed costs (rent, salaries, medical director fee, software, loan payments) are $40,000. Suppose an average treatment brings in $450 and costs $200 in product and provider pay, leaving $250. Break-even = $40,000 ÷ $250 = 160 treatments a month, or 8 a day over 20 working days. Replace every input with your own quotes.

Licensing, insurance and vendors

  • Business entity, tax ID and local business licenses.
  • Facility or device registrations your state requires for lasers or other energy devices; ask the board and your attorney.
  • Malpractice coverage for every provider, including the medical director, plus general liability and property.
  • Supplier accounts for neuromodulators and fillers. Ask each manufacturer or distributor whose license the account must be under.
  • Software: booking, charting with photo storage, payments.

HIPAA and patient records

  • Find out whether you're a HIPAA covered entity. HHS says health care providers are covered "only if they transmit any information in an electronic form in connection with a transaction for which HHS has adopted a standard" (opens in a new tab), such as electronic insurance claims. Even if HIPAA doesn't apply, running the same safeguards is good practice, and state medical-records and privacy laws may apply either way.
  • Protect photos. Before-and-after photos are patient records. Keep them in your charting system, not on staff phones.
  • Get written authorization before marketing use. Using a patient's photo or testimonial in marketing requires a signed HIPAA authorization (45 CFR 164.508) if you're covered, and written consent is good practice regardless.
  • Sign Business Associate Agreements with vendors that store patient information: charting, booking, forms, chat.

This is general information, not legal advice. Confirm how it applies to your practice with a qualified advisor.

Pricing, memberships and offers

  • Price per unit, syringe or session, and publish prices or "starting at" ranges where your market expects them.
  • Design a membership for recurring treatments; see med spa membership programs for structures.
  • Plan introductory offers carefully. Ask your attorney whether discount-site deals raise fee-splitting or advertising issues in your state.
  • Set package and refund terms in writing before you sell the first package.

The launch marketing plan

For channel strategy beyond launch, see med spa marketing.

Medfy builds a website with a page per service and HIPAA-compliant forms. The Meta ads + AI creatives add-on ($199 a month) makes on-brand static ads from your own website with copy written for healthcare ad policies, and the HIPAA AI chat widget ($49 a month) answers prospective patients around the clock and captures consultation requests, covered by your BAA. Start with the free audit and website preview.

Planning a different practice? See starting a medical practice, opening a dental practice, or the overview of how to start a private practice.

Frequently asked questions

Do you need a doctor to open a med spa?

In most setups a physician is involved, but the rules depend on your state. State law decides who may own a medical practice, who must serve as medical director, who can examine patients and who can inject under what supervision. Some states allow non-physician ownership through a management company structure. Check your state medical board and a healthcare attorney before you sign anything.

How much does it cost to open a med spa?

It depends on your state's ownership model, location, build-out and above all equipment: a practice built around lasers and other devices needs far more equipment than one focused on injectables. Rather than trust a general range, price each category locally: legal and licensing, lease and build-out, devices, first inventory, insurance, staff, software and marketing, plus several months of working capital. Label any figure you can't source as an assumption.

What should a med spa business plan include?

Your services and prices, the provider model (who owns, who is medical director, who treats under what supervision), startup costs by category with sources or stated assumptions, monthly fixed costs and a break-even calculation, a marketing plan with budgets by channel, and the state legal structure your attorney approved. Lenders and partners will look hardest at the provider model and the break-even math.

How do new med spas get their first clients?

Start before opening: a website with a page for each treatment, a verified Google Business Profile with your opening date, and before-and-after photos only with signed patient authorization. Then run local search ads for high-intent treatments and social ads that follow Meta's cosmetic and drug policies, targeted to adults. Introductory pricing and a membership program help turn first visits into regulars.

Sources

  1. How to Open a Med Spa (opens in a new tab) — American Med Spa Association. Accessed October 22, 2026.
  2. Medical Spa Laws (opens in a new tab) — American Med Spa Association. Accessed October 22, 2026.
  3. Contact a State Medical Board (opens in a new tab) — Federation of State Medical Boards. Accessed October 22, 2026.
  4. Covered Entities and Business Associates (opens in a new tab) — HHS Office for Civil Rights. Accessed October 22, 2026.
  5. Healthcare and medicines policy (opens in a new tab) — Google Ads Help. Accessed October 22, 2026.
  6. Drugs and pharmaceuticals (opens in a new tab) — Meta Transparency Center. Accessed October 22, 2026.
  7. Health and wellness (opens in a new tab) — Meta Transparency Center. Accessed October 22, 2026.
  8. Add a business opening date (opens in a new tab) — Google Business Profile Help. Accessed October 22, 2026.
All pages

Free AI marketing audit

See your rebuilt website before you pay

Start with the free audit. Then Medfy rebuilds your current site so you can see a free preview of your new website first.