Med Spa Reviews: Getting Them Without Breaking Ad Rules

Why med spas have it harder than the average local business

A restaurant can ask every table to leave a Google review and nobody blinks. A med spa doesn't have that luxury. Three things make review collection genuinely harder in this category.

Before/after photos are the best proof — and the most sensitive asset you have

Nothing sells a filler, a peel, or a laser package like a side-by-side photo. It's also the single piece of content most likely to get an ad disapproved or a patient uncomfortable if it's shared without clear, specific consent. Photos tied to a review (a patient posting their own before/after alongside their star rating) carry more weight precisely because they're voluntary and patient-controlled — but you still need documented consent for how and where that image can be used, separate from the consent you got for treatment itself. Treat "can we use this for marketing" as its own conversation, not something bundled into intake paperwork nobody reads closely.

Ad platforms restrict health-related claims and imagery

Google and Meta both apply extra scrutiny to ads touching health, cosmetic procedures, and body image — this can mean restrictions on before/after imagery, limits on certain claims, or stricter review of ad copy than a typical local business ad would get. The specifics shift over time and vary by platform, so don't assume last year's approved ad creative will clear review today. If you're running paid social or search ads featuring patient results, budget time for the ad to get flagged, and have a compliant backup version ready — testimonial text without a photo, or a generic treatment description without a specific before/after.

This is also why organic review volume matters more for med spas than for most businesses: a strong, visible star rating on Google and your booking platform does marketing work that a restricted ad can't always do on its own.

Patient privacy isn't optional, and reviews can accidentally break it

A patient leaving a five-star review and mentioning "my Botox with Dr. Smith for my forehead lines" is disclosing their own treatment — that's their choice to make. But if you reply to that review and confirm details, repost it with added specifics, or screenshot it into an ad without checking what's visible, you've now put patient health information in a public, permanent place with your business's name attached. The patient can say what they want about their own care. Your job is to not add to it, confirm it, or repurpose it in a way they didn't agree to.

The safe habit: thank the reviewer, keep your reply generic ("So glad you're happy with your results — see you at your next visit!"), and never use a patient's review, name, or photo in paid or owned marketing without a separate, specific sign-off for that use. If you work across other categories too, it's worth comparing how review norms differ — a beauty and wellness business selling haircuts and facials has far more room to repost a tagged photo than a med spa doing injectables does.

Multiple providers and multiple locations complicate the picture further

A single-provider med spa can keep review practices consistent just by being careful. A multi-provider practice, or one with two or three locations, has a harder version of the same problem: each injector, esthetician, or front desk lead may ask for reviews differently if nobody's written the process down. One location's front desk might casually request reviews from everyone; another might only mention it to patients who compliment their results out loud, without realizing that's a selective-ask problem. Standardize the request flow across every provider and every location — same message, same timing, same consent language for marketing use — so review quality doesn't depend on which staff member happens to be working that day.

Compliant ways to ask for reviews

None of this means you give up on reviews. It means you ask in ways that don't depend on photos, specific procedure details, or selective timing.

Ask everyone, not just your best results

The biggest compliance risk isn't really the review itself — it's cherry-picking who you ask. If front desk only sends review requests to patients who looked thrilled walking out, that's a selective practice that both looks bad and skews your rating in a way that won't hold up over time. Ask every patient, every visit, through the same automated flow. Consistency is also what keeps you on the right side of platform policies that frown on incentivized or filtered review requests.

Time the ask around the result, not the injection

For most injectables and skin treatments, the "wow" moment isn't day one — it's two weeks later when swelling is down and results have settled in. A review request sent the day of treatment captures "the staff was nice." A request sent at the two-week mark, when the result is visible, captures "I can't believe how natural this looks." Build a short delay into your request sequence for treatments with a settling period, and send immediately for same-day-visible services like facials or peels.

Keep the ask about experience, not clinical specifics

You don't need a patient to narrate their procedure to get a useful review. "How was your visit today?" generates plenty of five-star feedback about the front desk, the wait time, how comfortable the room was, how the provider explained things — all of which sells the next patient without anyone needing to describe a treatment in detail. If a patient volunteers more, that's their call. Your prompt shouldn't ask for it.

Use text and email, and make it one tap

Med spa patients are often mid-errand or just back in their car when they're happiest with a result. A text with a direct link to your Google review page converts far better than an email buried in a promo folder. Keep the request to one link, one tap, no login wall.

Let staff ask in person, lightly

"If you loved your results, a Google review helps other people find us" — said once, at checkout, by the provider or front desk — works better than any automated message alone. It's not a sales pitch. It's a normal thing to say to someone who's happy. Pair it with the automated follow-up so the ask doesn't rely purely on staff remembering every time.

Point people to the review site where they'll actually show up in search

Google reviews matter most because that's where a prospective patient searching "med spa near me" will see your star rating before they ever hit your website. Don't split requests evenly across five different platforms — pick the one or two that actually move your visibility (Google first, a booking-platform or industry-specific site second) and point every request there by default. If a patient would rather leave feedback somewhere else, let them, but don't make your default ask harder to find than it needs to be.

Build it into a system instead of a one-off campaign

A single push for reviews gets you a bump and then a plateau. What actually moves a med spa's rating over a year is a steady, repeatable process: every patient asked, every time, with responses monitored so a bad experience gets caught and addressed before it becomes a public one-star review instead of a private fix. That's the difference between a business that got lucky with reviews once and one that's systematically good at it. Tools built for this — like Grow Rating — exist specifically to keep that cadence going without relying on front desk memory or a marketing sprint every few months.

What to avoid

A few habits are common in this category and worth cutting now, before they cause a bigger problem than a bad review ever would.

• Don't selectively ask only happy-looking patients. Filtering who gets the review request is the fastest way to end up with a rating that collapses the moment someone compares it to word of mouth, and it violates most review platforms' policies on soliciting reviews.
• Don't post before/after photos or reviews without documented, specific consent. Treatment consent and marketing-use consent are two different things. Get both, separately, in writing.
• Don't confirm or add clinical details in review replies. If a reviewer names a treatment, your reply doesn't need to repeat or confirm it. Keep responses warm and generic.
• Don't offer discounts or freebies in exchange for a review. Incentivized reviews break the terms of service on Google and most platforms, and a flagged pattern can get reviews removed in bulk — undoing months of legitimate work.
• Don't assume an ad creative that was approved before will clear again. Ad platform policies on health claims and imagery get enforced inconsistently and change over time. Re-check before every new campaign rather than reusing old creative on autopilot.
• Don't make specific outcome claims you can't stand behind. "Guaranteed results," "no downtime," or implied medical claims invite both ad disapprovals and scrutiny from your state medical board. If you're unsure whether a claim crosses a line, check with your state's board or your ad rules before it goes live rather than after a complaint.
• Don't let one team member own the entire review process informally. If it's not a documented, repeatable workflow, it stops the day that person is busy, out sick, or moves on.

The bigger picture

Med spas face a strange paradox: the category where visual proof matters most is also the category where showing that proof is hardest to do safely. The way through isn't fewer reviews — it's reviews that don't depend on photos or clinical detail to be convincing. A patient saying the front desk was warm, the wait was short, and their results exceeded expectations does real work, no image required.

Get the ask-everyone habit right, time it to when results actually show, keep your language generic, and treat marketing consent as its own signed-off step. That's a med spa reputation management approach that holds up under scrutiny from a medical board, an ad platform, and a patient's own sense of privacy — all at once. None of it needs to be complicated. It just needs to run the same way every single time.