How to Start a
Medical Spa

What Is a Medical Spa?

A medical spa, often called a med spa, sits at the intersection of aesthetic medicine and consumer wellness. Unlike a day spa, which generally focuses on non-medical services such as facials, massage, and cosmetic skincare, a medical spa offers procedures that require clinical judgment, medical evaluation, delegated authority, or licensed clinical performance. The setting may feel hospitality-driven, but the underlying services are often the practice of medicine.

A typical menu can include neuromodulators such as Botox, Dysport, or Xeomin; dermal fillers; laser hair removal; IPL photofacials; body contouring; chemical peels; microneedling; platelet-rich plasma or platelet-rich fibrin treatments; IV therapy; and medically supervised weight-loss programs. The exact menu should follow the capabilities of the clinical team, the medical director's protocols, and state-specific law.

That regulatory distinction matters from day one. Medical spas are subject to medical-practice laws, professional licensing rules, scope-of-practice limits, medical-record standards, informed-consent expectations, privacy requirements, and rules governing supervision. A polished retail experience cannot substitute for a compliant clinical infrastructure.

Medical Spa Regulations & CPOM

The Corporate Practice of Medicine doctrine, commonly called CPOM, is a state-law concept that limits non-physicians' ownership or control of medical practices in many jurisdictions. The doctrine is designed to protect clinical judgment from commercial influence. Because a medical spa delivers medical treatments, CPOM analysis can apply even when the brand, décor, and marketing resemble a consumer aesthetics business.

In strict CPOM states, a non-physician generally cannot own the entity providing medical care, employ physicians in a way that controls their judgment, direct clinical decisions, or use a compensation model that functions as impermissible fee-splitting. California, Texas, and New York are frequently cited for active or strict enforcement, while other states may be more permissive or apply different professional-ownership rules. The relevant question is always the current law in the state where care is delivered.

The common response is an MSO/PC structure: a professional entity owned as state law requires delivers clinical services, while a separate management company supplies legitimate non-clinical support. Review the [Corporate Practice of Medicine](/lexicon/corporate-practice-of-medicine) overview, then engage a healthcare attorney before funding an entity, marketing treatments, or signing operating agreements.

MSO & PC Structure for Medical Spas

In a common medical-spa MSO model, the entrepreneur owns a regular LLC or corporation—the Management Services Organization. The MSO provides legitimate administrative and operational services to the clinical entity: branding, lease and facilities support, technology, payroll administration, bookkeeping, scheduling, marketing administration, vendor coordination, and other non-clinical infrastructure. In return, the MSO receives a management fee structured with counsel for the applicable state.

The professional corporation or PLLC is owned by a physician or other permitted licensed professional under state law. It delivers the medical services, holds the clinical records, employs or contracts with clinical personnel as appropriate, receives professional revenue, and maintains responsibility for professional practice. The [Management Services Organization](/lexicon/management-services-organization) lexicon entry provides additional context for the operational split.

The separation must be real, not paper-only. The physician must retain genuine control over clinical decisions, including patient care, protocols, supervision, staffing decisions that affect clinical practice, medical records, and referral decisions. A nominal physician who merely lends a license while a non-clinician directs care is not a compliant substitute for real medical leadership. Have counsel tailor ownership, agreements, bank accounts, fee methodology, and decision rights to your facts.

Medical Director Requirements

A medical director in a medical spa develops and approves clinical protocols, determines appropriate supervision and delegation, supports provider training, reviews quality and adverse events, and helps ensure the practice follows clinical and regulatory standards. The medical director's role should be documented in an agreement that matches the actual services, availability, communication cadence, and quality-assurance work required by the practice.

Supervision requirements vary sharply by state and by provider type. RNs, NPs, and PAs may have different authority to perform injectables, energy-based treatments, medical evaluations, or follow-up care. Some states require a good-faith examination before treatment or prescribe the form of physician supervision; others recognize broader NP authority. Your protocols must identify who performs each service, under what conditions, and how the physician is involved.

Look for a medical director with relevant aesthetic-medicine experience, active malpractice coverage, clear communication habits, and willingness to participate in protocols, training, audits, and adverse-event review. AJ Pakpour provides [medical director services for medical spas](/services/medical-director-med-spa) nationwide, with placement and structure tailored to the clinical and operational needs of the practice. See also the [Medical Director](/lexicon/medical-director) lexicon entry before comparing arrangements.

Licensing & Permits

Medical-spa licensing is not one application. Start with professional-entity formation and any state medical-board registration or reporting required for the practice. You may also need a local business license, zoning clearance, certificate of occupancy, facility permits, signage approval, and additional local registrations. Work backward from your planned opening date because inspections and board processing times can affect the timeline.

If prescribers will order medications that require DEA registration, verify prescriber registration, practice-address requirements, controlled-substance workflows, and applicable state monitoring obligations. If the practice dispenses medications, state pharmacy-board rules may apply. OSHA compliance—including bloodborne-pathogen training, exposure-control planning, sharps handling, and workplace safety documentation—should be operational before patients arrive.

Laser and energy-device services can trigger separate laser-safety officer, operator-training, registration, delegation, or facility requirements. Certain states also impose aesthetic-practice, cosmetology, nursing, or medical-facility rules that interact with the service menu. Treat every checklist as state-specific and confirm it with counsel and the relevant boards rather than relying on a generic online list.

• ✓Professional entity and any state medical-board registration
• ✓Local business, zoning, occupancy, and facility approvals
• ✓DEA and controlled-substance compliance where applicable
• ✓Pharmacy-board analysis if medications are dispensed
• ✓OSHA program, laser safety, and service-specific training

Service Menu & Equipment

A focused launch menu is often safer and more economical than attempting every aesthetic category immediately. Common offerings include neuromodulators such as Botox, Dysport, and Xeomin; hyaluronic-acid fillers, Sculptra, and Radiesse; laser hair removal; IPL photofacials; body contouring technologies such as CoolSculpting, Emsculpt, and Morpheus8; chemical peels; microneedling; PRP or PRF; IV therapy; and weight-loss programs. Confirm the clinical appropriateness, staffing model, supervision, and supplies behind each service before advertising it.

Equipment is a capital-allocation decision as much as a clinical one. Compare lease versus purchase terms, total financing cost, FDA clearance or authorization status relevant to the intended use, manufacturer training, warranties, maintenance contracts, consumables, downtime risk, resale value, and expected patient volume. Do not assume a popular device can be used for every marketed indication or by every team member.

A typical startup equipment budget can range from $150,000 to $500,000 or more, particularly when multiple energy devices are involved. Model break-even utilization and marketing cost for every major device. It can be more prudent to launch with high-demand, lower-capital services and add technology after the practice demonstrates repeatable patient demand and operational discipline.

Staffing Your Medical Spa

A typical medical-spa team includes a physician medical director, injectors such as NPs, PAs, or RNs where permitted, laser technicians, estheticians, and front-desk or patient-coordinator staff. The appropriate mix depends on the service menu, state law, clinic volume, and the medical director's approved care model. Each role needs a written job description, training plan, escalation pathway, and clarity about who owns clinical decisions.

Scope of practice is not interchangeable. Who may inject, operate a laser, perform chemical peels, conduct a consultation, administer IV therapy, or obtain consent varies by state and sometimes by treatment depth or device. A credential alone does not automatically authorize a procedure; supervision, delegation, training, and facility rules can all apply. All clinical personnel must practice within their licensed scope and under the structure required in the state.

Evaluate 1099 versus W-2 classification based on the actual working relationship, not a preference to reduce payroll burden. Control over schedules, tools, protocols, patient assignment, training, and day-to-day work may point toward employee status. Verify professional licenses, sanctions history, training records, references, malpractice coverage, and any collaborative or supervisory documents before a provider treats patients.

Medical Spa Business Plan & Financials

Medical-spa startup costs commonly range from $250,000 to $1,000,000 or more. Location, buildout, number of treatment rooms, equipment, initial inventory, legal formation, insurance, technology, training, payroll, launch marketing, and working capital all shape the total. A financial plan should distinguish one-time startup expenses from recurring costs and stress-test revenue assumptions against a slower-than-expected launch.

Most med spas use a cash-pay model, which can simplify reimbursement but makes perceived value, conversion, rebooking, and patient experience central to the business. Individual treatment pricing can be supplemented by packages, prepaid series, maintenance plans, retail skincare, and memberships. Average revenue per patient visit often falls in the $300–$800 range, but that number is only useful when paired with provider time, supply cost, discounting, and acquisition cost.

Track patient retention rate, revenue per square foot, treatment-room utilization, new-patient conversion, rebooking rate, average revenue per visit, gross margin by service line, and marketing cost per acquired patient. Many practices take 12–24 months to reach break-even. Potential financing sources include SBA loans, equipment financing, investor partnerships, and founder capital; each should be evaluated alongside CPOM, ownership, and control restrictions. A [Strategy Session](/services/strategy-session) can help pressure-test the operating model before a major lease or equipment commitment.

Patient Acquisition & Marketing

Medical spas commonly use Google Ads, Instagram and Facebook campaigns, educational before-and-after content, a well-maintained Google Business Profile, referral programs, loyalty programs, email marketing, and reactivation outreach. The most effective mix depends on local competition, service-line economics, patient demographics, conversion workflow, and your team's ability to respond quickly to inquiries. Marketing without a reliable consultation and follow-up process often produces expensive leads instead of booked treatments.

Aesthetic marketing carries legal and ethical constraints. Before-and-after images should comply with FTC truthfulness standards, reflect real and appropriately representative results, include required disclosures, and protect patient privacy with valid authorization. Advertising a named prescription product, medical indication, or expected result can also raise FDA and state medical-board issues. Do not promise outcomes, conceal material conditions, or use testimonials without appropriate disclosure and review.

Reputation management is a core operating process, not a one-time campaign. Ask for feedback through a compliant workflow, respond professionally to reviews without disclosing protected information, monitor recurring service issues, and make it easy for satisfied patients to find and review the practice. Align every ad, landing page, offer, photograph, and referral incentive with counsel-reviewed policies and the actual clinical experience.

Compliance & Risk Management

A compliance program should be built into the patient journey. Key areas include informed-consent documentation, HIPAA privacy and security practices, good-faith examination requirements, appropriate medical-record creation and retention, adverse-event recognition and escalation, inventory controls, and ongoing quality assurance. Every treatment should have written physician-approved protocols that define eligibility, contraindications, consent, procedure steps, aftercare, documentation, and emergency response.

Insurance is part of the risk architecture. Clinical providers and the practice need appropriate malpractice coverage, while the business may also need general liability, property, workers' compensation, employment-practices, and cyber liability coverage. Understand occurrence versus claims-made malpractice policies, exclusions for aesthetic services or devices, consent-to-settle provisions, and whether tail coverage is needed. Review the [malpractice insurance resource](/resource-center/malpractice-insurance-legal) before binding coverage.

Medical spas receive significant state medical-board attention because informal supervision, delegation shortcuts, and consumer-style marketing can obscure clinical risk. Audit charts, consents, credentials, training, marketing, medication handling, and incident logs on a recurring schedule. When a question touches ownership, compensation, delegation, scope, or discipline risk, use the [healthcare attorneys directory](/resource-center/healthcare-attorneys) to identify qualified state-specific counsel rather than relying on a template.

• ✓Written clinical protocols for every treatment and device
• ✓Documented consent, good-faith exam, records, and aftercare workflow
• ✓Active adverse-event, emergency, and escalation procedures
• ✓Appropriate professional, general, and cyber insurance
• ✓Scheduled audits of charts, credentials, training, and marketing