Wellness Is Still Medicine: The Med Spa Compliance Wake-Up Call Owners Cannot Ignore

Sure, adding IV and peptides seem hot right now. Do you have the compliance infrastructure in place?

The aesthetic industry has a habit of making medical services sound deceptively simple.

Add IV therapy. Launch a weight-loss program. Bring in peptides. Offer hormones.

Add PRP. Throw NAD+ on the menu because patients are asking for it.

And from the business side, I understand exactly why owners are doing it. The modern aesthetic practice is evolving. Patients want more than tox and filler. They are looking for wellness, longevity, metabolic health, hormone optimization and treatments that bridge the gap between how they look and how they feel.

There is absolutely an opportunity there. But there is also a problem:

Your service menu cannot outgrow your infrastructure.

And right now, that is happening all over the aesthetic and wellness industry.

A Tragic Reminder That “Wellness” Is Still Medicine

On July 28, the American Med Spa Association reported on the death of a 27-year-old New York woman following an NAD+ infusion at a wellness center in the Bronx. According to reporting cited by AmSpa, Elizabeth Baron lost consciousness and went into cardiac arrest shortly after receiving the IV infusion on July 19. The individual who allegedly administered the treatment was licensed to practice medicine in the Dominican Republic, but prosecutors alleged that he was not licensed to practice medicine in New York or elsewhere in the United States. He was charged with unauthorized practice of a profession and reckless endangerment.

As of AmSpa's July 28 report, the medical examiner had not released the official cause of death and toxicology testing remained underway. It would therefore be irresponsible to conclude that NAD+ itself caused her death.

And frankly, I don't think NAD+ is the most important part of this story anyway.

The bigger conversation is what happens when the wellness industry forgets that wellness medicine is still medicine.

An IV bag sitting in a beautiful lounge with a blanket, sparkling water and calming music is still an IV. A vitamin injection with cute branding is still an injection. A weight-loss membership is still medical treatment when prescription medication is involved.

A peptide does not stop being medicine because Instagram calls it optimization.

And adding these services requires considerably more than adding another line to your website.

The Industry Is Growing Faster Than Its Infrastructure

Many med spas started with a fairly narrow clinical model: injectables, aesthetic devices, skin treatments and perhaps a small retail component.

Then the industry exploded.

Today, one practice may offer neurotoxins, fillers, lasers, GLP-1 medications, IV therapy, hormone programs, PRP or PRF, peptides, body treatments and regenerative services under the same roof.

That evolution isn't inherently a problem.

The problem is when the clinical infrastructure stays exactly the same while the service menu triples.

I've seen practices spend months researching the revenue opportunity of a new service and almost no time mapping the operational responsibility behind it.

They know:

What they're going to charge.

How they're going to market it.

What package they're going to offer.

What the launch special will be.

But then I ask:

Who medically evaluates the patient?

Who determines candidacy?

Who writes the order?

Who is legally permitted to prepare the treatment?

Who administers it?

Who monitors the patient?

Where is the medication sourced?

How is it stored?

What happens if the patient has an adverse reaction?

Who is responsible for escalation?

And suddenly the answers get a lot less clear.

That is a problem.

Every New Medical Service Creates a Chain of Clinical Responsibility

When you add a medical service, you aren't just adding a treatment.

You are creating an entire chain of clinical responsibility:

Patient evaluation → candidacy → prescribing or ordering → sourcing → storage → preparation → administration → monitoring → emergency response → documentation → follow-up

Someone has responsibility at every point in that chain.

And depending on the service, provider licenses and state in which you operate, the requirements can change significantly. This is why compliance cannot be copied and pasted from another practice.

It's why “my friend owns a med spa and this is how she does it” is not a compliance strategy.

And it is definitely why buying a template online does not automatically make your practice compliant. IV therapy is a perfect example. AmSpa maintains an entire resource center devoted specifically to the legal, regulatory and operational considerations of IV therapy in medical aesthetic practices. Regulators in individual states continue to scrutinize issues such as patient evaluation, prescribing, supervision, delegation and who may prepare or administer IV products.

Kansas regulators, for example, issued guidance earlier this year emphasizing that IV therapy is medical practice requiring appropriately licensed professionals. Their guidance addressed individualized patient evaluation, prescribing authority, supervision, delegation and preparation of IV medications. Those exact requirements are state-specific, but the larger message should get every practice owner's attention:

You need to know what your state requires before you build the service, not after something goes wrong.

Your Medical Director Is Not a MedSpa Compliance Strategy

Here's another uncomfortable conversation we need to have.

“I have a medical director” is not the same thing as:

“My medical practice is properly structured and clinically overseen.”

Too many owners think the medical director agreement itself is the safety net. They found a physician, they signed a contract, and the physician's name is attached to the practice.

Done.

Except what happens next matters a whole lot more than the signature.

Does your medical director understand every medical service being offered?

Have responsibilities been clearly defined?

Are protocols current?

Are providers working within their individual scopes?

Is delegation appropriate?

Are state-specific supervision requirements being followed?

Who reviews clinical policies?

Who handles adverse events?

Who updates protocols as services, medications and staff change?

How involved is your medical leadership in the actual clinical operation?

A medical director cannot effectively oversee a medical practice they don't actually know. And “available by text if something happens” is not a universal regulatory standard.

The appropriate structure and level of supervision varies by state, provider type and treatment, which is exactly why practices need state-specific legal and clinical guidance rather than assumptions.

An SOP in Google Drive Doesn't Protect Anyone If Nobody Follows It

And while we're at it, let's talk about the giant compliance folder many practices proudly tell me they have. Policies-Standing orders-Consent forms-Emergency protocols-Training documents!

All sitting beautifully inside Google Drive.

Fantastic.

Now ask a team member what happens if a patient becomes unresponsive during an IV.

Ask where the emergency medications are.

Ask who checks expiration dates.

Ask where an adverse event is documented.

Ask a new hire which treatments require a medical evaluation before treatment.

Ask who can perform which service.

Ask the team when the emergency protocol was last practiced.

A consent form is not clinical infrastructure.

A medical director's signature is not clinical infrastructure.

An SOP sitting in Google Drive is not clinical infrastructure.

Infrastructure exists when policies turn into repeatable behavior. Your team knows the process. The process matches the law. Training is documented. Competency is verified.

Supplies are available.

Someone owns each responsibility.

And when something doesn't go according to plan, your team does not have to figure out what to do while the patient is sitting in front of them.

That is operations.

Before You Add Another Wellness Service, Run This Audit

Take every medical service on your menu and ask:

1. Who evaluates the patient?

What evaluation is required before this treatment, and who is legally qualified to perform it?

2. Who determines candidacy and orders treatment?

Is that decision individualized to the patient, and is the appropriate licensed provider making it?

3. Who can perform the treatment?

Do not assume that because someone knows how to perform a procedure, they are legally allowed to perform it in your state.

4. Where does the medication or product come from?

Do you know the source, ordering process, storage requirements and chain of responsibility?

5. What written clinical protocols govern the service?

And are they actually specific to your practice, providers, products and equipment?

6. Has every team member been trained and competency documented?

Watching someone perform the service twice is not a competency program.

7. What monitoring does the patient require?

Before treatment. During treatment. After treatment.

8. What happens when something goes wrong?

What constitutes an adverse event? Who intervenes? Who gets called? What emergency equipment and medications are available? When does the situation become a 911 call?

9. How is everything documented?

Evaluation, consent, product information, treatment details, response, follow-up and any adverse event.

10. Does your insurance actually cover what you're doing?

Your provider. Your service. Your facility. Your exact model.

And here's my favorite operational audit question:

If your answer to any of these is “I think…” you just found something you need to verify.

Not next quarter, not when you have more time. NOW!

Growth Without Infrastructure Is Exposure

I am not against med spas adding wellness services, in fact, quite the opposite. There is enormous opportunity for aesthetic practices to evolve into more comprehensive destinations for aesthetics, wellness and longevity.

But opportunity does not eliminate responsibility.

Adding a new service because patients are asking for it is not enough.

Adding it because the margins look great is not enough.

Adding it because your competitor offers it is definitely not enough.

Before you ask:

“How fast can we launch this?”

Ask:

“Are we actually built to deliver it?”

Because the practices that will succeed in this next evolution of aesthetics aren't necessarily the ones with the biggest menus. They're going to be the practices with the strongest foundations behind those menus.

Clinical oversight.

Clear roles.

Proper protocols.

Competent teams.

Documented workflows.

Emergency preparedness.

Operational accountability.

The stuff patients will probably never see - but the stuff that matters most when they need it.

Your service menu should never be more sophisticated than the infrastructure supporting it.

And if your practice has been adding services faster than you've been building the systems behind them, it may be time to stop adding and start auditing.

Is Your Practice Built for the Services You're Selling?

Apex Aesthetic Consulting helps aesthetic practices identify the operational gaps hiding behind growth—from clinical workflows and team responsibilities to SOPs, onboarding, compliance systems and service implementation.

If your practice has added IV therapy, weight management, hormones, regenerative treatments or other wellness services and you're not completely confident the operational infrastructure has kept pace, it is time for a call.

Book a consultation with Apex Aesthetic Consulting and make sure your foundation is ready for the next stage of growth.

Compliance requirements vary by state, provider license, practice structure and treatment. This article is intended for business and operational education and is not legal or medical advice. Practices should work with qualified health care counsel and appropriate clinical leadership to determine the requirements that apply to their organization.