Med-Spa Texts After a Consultation: Follow-Up or Sales Pitch?

Start with the consultation-to-promotion timeline

Make separate entries for an online inquiry, a booked consultation, an actual procedure, any aftercare message and a later offer. Save the authorization displayed at each stage. Do not assume that a quotation form and a clinical intake form said the same thing.

In a fictional sequence, a person books a consultation, receives its time and location, and later gets a discount offer for a multi-session package. Another message gives instructions relating to a procedure they actually received. Classify the complete messages and record the context without treating all three as either sales or healthcare.

The business name does not answer the HIPAA question

HIPAA defines health care broadly, including specified care, services and procedures related to an individual’s health or bodily structure or function. Covered-entity status is a separate definition: a provider must transmit health information electronically in connection with a covered transaction. A business associate has its own defined relationship and functions.

Consequently, “med spa,” a clinician’s involvement, a cosmetic-service description or a cash payment is not a substitute for checking the relevant definitions and actual entity. Do not infer that every med spa qualifies—or that no cosmetic service can be health care.

Source basis: 45 C.F.R. § 160.103

A package offer cannot simply borrow the reminder exemption

The FCC’s narrow exemption for certain healthcare cellular messages lists permitted purposes and excludes advertising, telemarketing, solicitation and financial content. A sales offer cannot use that exemption just by appearing in the same thread as a reminder. Its other conditions still matter for a genuinely qualifying healthcare message.

The separate healthcare exception to written consent in §64.1200(a)(2) requires its own health-care-message and covered-entity or business-associate analysis. Do not merge the two provisions. If that exception is unavailable, covered automated telemarketing raises the written-consent requirements in the rule; the message’s technology and other elements still require separate proof.

Source basis: 47 C.F.R. § 64.1200

What the healthcare case example does—and does not—show

Latner v. Mount Sinai involved a hospital-related flu-shot reminder, not a ruling approving med-spa package promotions. The Second Circuit considered the number provided, signed forms and privacy notices when assessing the scope of consent.

Use that decision as a reason to preserve the actual consent record, not as a shortcut from “there was a consultation” to “all later marketing was authorized.” This article does not identify a med-spa-specific appellate rule or decide any particular provider’s exemption.

Source basis: 879 F.3d 52 (2d Cir. 2018), amended Jan. 9, 2018

Build a record that keeps the questions separate

Keep the consultation form and any later marketing checkbox or agreement. Record the exact named seller, services discussed, message content, opt-out instruction and subsequent messages. Note what you do not know, including the relationship between a brand, local office and messaging vendor.

If you want to stop messages from a verified sender, keep your request and its confirmation alongside later contacts. Do not describe a clinical follow-up as a promotional message merely because both arrived after the same visit. The guides below explain record preservation and the general opt-out framework.

A current-law timing note

On October 1, 2026, the FCC released FCC 26-67 changing parts of its consent-revocation rules. The order says the amendments take effect thirty days after Federal Register publication. They are not treated as effective on this article’s October 4 review date. Use the linked STOP guide for the general framework, and check the rule effective on the date of the message rather than assuming the new order applied when adopted.

Source basis: FCC 26-67, released Oct. 1, 2026