How to start a med spa, from first decision to first booking

The playbook

Six steps, in the order that actually works. The first five are about doing it legally and safely; the last is how to fill your books.

1. 1Legal foundation

   Get the legal model right

   A med spa is a medical practice — structure it like one before anything else.

   In the eyes of the law a med spa is a medical practice, not a salon. In many states a non-physician can't own the clinical side at all — you operate through a physician-owned professional corporation plus a Management Services Organization (MSO) that you own and that runs the business side. Get the structure wrong and you risk fines, forced closure, or a deal that unravels when you try to sell. This is the one place to spend on a healthcare attorney before you do anything else.

   Key moves

   • Check whether your state lets a non-physician own a med spa (your state panel says).
   • If it doesn't, set up an MSO you control alongside a physician-owned professional corporation.
   • Have an attorney write the MSO agreement to charge fair-market fees — never a share of clinical revenue (that's illegal fee-splitting).

   Whether a non-physician can own a med spa where you are — and how the MSO must be set up — is in your state panel above.

2. 2Admin & setup

   Form your entity and clear the paperwork

   The boring filings that quietly keep you legal.

   With the model decided, stand up the actual entities and the unglamorous paperwork that keeps you compliant. It's tedious — but something as small as a missing fictitious-name permit is one of the most commonly fined mistakes in the industry.

   Key moves

   • Register the professional corporation and/or MSO with your state.
   • File a fictitious-name / DBA permit if you'll trade under a brand name.
   • Get your EIN and local business license.
   • Bind malpractice cover for the clinical side and general liability for the business.

   Licensing and naming rules vary — your state panel lists what's required where you are.

3. 3Location

   Choose a location with real demand

   Validate demand before you sign a lease — not after.

   Don't commit to a five-year lease on a hunch. Confirm there's genuine, under-served demand for aesthetic treatments in the catchment area first, then negotiate your lease and plan a build-out that meets the facility requirements for the treatments you'll offer.

   Key moves

   • Pressure-test demand in the area before you commit.
   • Negotiate lease terms and a tenant-improvement allowance for the build-out.
   • Design the space to meet facility rules for your treatment menu (lasers, injectables, etc.).

   Use our Demand Map to see where med-spa demand is strong and where it's already saturated before you commit.

4. 4Your team

   Build your clinical team and get delegation right

   Who can legally treat patients defines your payroll.

   Recruit a medical director, then get your head around the two rules that quietly set your economics: the good-faith exam (who must evaluate a patient before treatment) and exactly who may inject or fire a laser in your state. In some states an esthetician can; in others only a nurse or physician can — and that single rule can double your payroll.

   Key moves

   • Appoint a medical director and agree on oversight, protocols and availability.
   • Confirm who must perform the good-faith exam where you operate.
   • Map every treatment to who's legally allowed to perform it, then hire to that.

   Your state panel spells out the good-faith-exam rule and who's allowed to perform each treatment.

5. 5Compliance

   Get privacy and compliance right

   You handle medical data on day one — be ready for it.

   You're handling sensitive medical data from your first patient, so you need HIPAA-compliant practices plusyour state's stricter rules — California's CMIA, Washington's My Health My Data Act, and so on. Two documents every clinic needs: a public-facing Privacy Policy and a patient-facing Notice of Privacy Practices.

   Key moves

   • Adopt HIPAA-compliant intake, storage and consent processes from day one.
   • Publish a Privacy Policy and give patients a Notice of Privacy Practices (start from your state templates above).
   • Get signed photo-and-marketing consent before using any before-and-after image.

   We've prepared a state-specific starting template for both documents — read and download them from your state panel above.

6. 6Growth

   Then market — in the right order

   Earn trust first; sell packages second.

   The most common marketing mistake is launching with high-ticket, multi-visit packages to people who've never met you. They need to walk in and trust your clinic first — so sequence your marketing instead of doing everything at once.

   Key moves

   • Start with the low-hanging fruit: Meta (Facebook + Instagram) ads for one simple, low-risk “come try us” offer that gets first visits in the door.
   • Earn trust in person, then introduce memberships and packages to people who already trust you.
   • Be everywhere organically — post across Facebook, Instagram, TikTok and YouTube using a multi-post tool so one piece of content goes everywhere.
   • Own local search: your Google Business Profile and local SEO will make or break you, because most new patients find you on Maps.
   • When you're ready to scale, compare honest agencies — what they do, what they cost, and how they actually rank.