Meta Changed the Before and After Rule. Here Is What Med Spas Can Run Now.

For most of the last five years, the working answer for aesthetic practices was that before and after photos were effectively unusable in paid social. Not because anyone had read the policy carefully, but because everyone had tried it, watched the ad get rejected, and stopped asking.

On July 22, 2026, that changed.

Meta rewrote its Health and Wellness Advertising Standards, and the change is structural rather than cosmetic. It is also smaller in practice than the headlines suggest, and it does nothing at all to the rulebook that carries the most risk for a medical practice.

Here is what actually moved, what did not, and what your practice can put in front of a patient without spending the next quarter appealing a disabled ad account.

What changed on July 22, 2026?

Meta moved from product-based enforcement to claims-based enforcement.

Under the old logic, certain things triggered rejection on sight. A weight loss product, a side by side comparison, a supplement bottle. The category or the format was the violation, more or less regardless of what the ad said or how responsibly it said it.

Under the new logic, the violation lives in the claim. The same image can be compliant or non-compliant depending entirely on the copy sitting next to it. Side by side and before and after imagery is no longer automatically rejected for weight loss products and services or for cosmetic products, procedures, and surgeries. It becomes a violation when it is paired with prohibited content, which principally means statements of inferiority and misleading efficacy claims.

Meta also loosened blanket age targeting on some adjacent categories. Vitamins, supplements, and protein products no longer carry automatic 18 plus targeting unless they make weight loss or weight gain claims.

Several things stayed prohibited outright, including pinched fat imagery, sensational or misleading health claims, skin whitening and bleaching products, and products marketed for sexual enhancement.

The compliance battleground moved out of your creative folder and into your ad copy.

Wait, was before and after ever actually banned?

No, and this is worth correcting because the misunderstanding shaped a lot of budgets.

Even before July, Meta's written policy was never a blanket prohibition on before and after imagery. The restriction was specific: side by side transformation comparisons were prohibited for weight loss products, and for wrinkle and anti-aging treatments such as injectables. General cosmetic products, procedures, and surgeries had considerably more latitude, provided the ad targeted adults and avoided negative self-perception tactics.

So why did every practice owner believe it was banned?

Because automated review did not read the policy the way the policy was written. Ad review flagged the visual format on sight, and the appeal process was slow enough that most practices stopped submitting rather than fight it. The lived experience diverged from the written rule, and the folk wisdom that grew in that gap was "you cannot run before and afters."

That distinction matters right now, because it tells you what to expect from the new rule. The written policy has loosened. Whether automated enforcement has caught up is a separate question, and during any policy transition the systems doing the reviewing are being retrained. Expect inconsistency for a while, and expect it to break in the direction of over-rejection rather than under.

What did not change

Four separate rulebooks govern the same photograph. Meta just moved one of them. Here are the other three, plus the parts of Meta's own policy that did not budge.

The claims rules

Loosening the format restriction did not loosen the content restriction, and Meta's enforcement of claims got more sophisticated rather than less.

Ads still cannot use messaging that implies the viewer has a flaw, exploits insecurity, or generates negative self-perception. Ads still cannot make unsubstantiated efficacy claims. And enforcement in 2026 evaluates copy, imagery, and the landing page together rather than as separate elements, which means a perfectly clean photograph paired with a headline like "erase ten years in one visit" is read as a misleading transformation claim even though neither element would have failed alone.

The practical version: your image is now the safe part. Your headline is the exposure.

Age targeting

Ads promoting cosmetic products, procedures, or surgeries must still be targeted to people 18 or older. This is applied automatically regardless of what you set, so it is less a compliance task than a planning constraint. Build your audience assumptions around it rather than discovering it in delivery.

The tracking and optimization restrictions, which are the bigger problem

This is the part almost nobody is discussing, and for a med spa it constrains performance far more than creative ever did.

Meta's health and wellness classification is a separate policy from its advertising standards, and it did not change in July. Advertisers classified as health and wellness are assessed either partial or full restriction on their ability to optimize toward lower funnel conversion events. That means events like purchase or appointment booked may be unavailable to you, with full restrictions typically applied to advertisers linking to sensitive properties such as patient portals.

Alongside that, Meta has been flagging and disabling custom and lookalike audiences whose names, rules, or metadata imply sensitive health traits. An audience called something like "botox interest list" or a custom conversion named "consultation booked" can be disabled on the naming alone.

Sit with the implication. You may now be permitted to show a before and after, and simultaneously unable to optimize the campaign toward the booking it was meant to produce. A creative unlock does not help much if the campaign is optimizing for landing page views.

HIPAA, which Meta does not enforce and you must

This is the rulebook that carries real consequences, and it is entirely untouched by anything Meta did.

A before and after photograph of an identifiable patient is protected health information. Using it to promote your practice is marketing under the HIPAA Privacy Rule, which means it requires a signed written authorization under 45 CFR 164.508 before the image goes anywhere: website gallery, Instagram feed, paid ad, brochure, or email.

Several details trip practices up consistently.

• A consent to treat form is not a marketing authorization. They are separate documents and separate signatures. Bundling the marketing release into the intake stack is one of the most common findings in a practice audit.
• The authorization has required elements. A description of what will be disclosed, who may use it, the purpose, an expiration date or event, and a plain statement of the patient's right to revoke. An enthusiastic verbal yes does not satisfy the rule, and neither does a generic photo release borrowed from a non-medical business.
• Revocation has to be operable. A patient can withdraw authorization, and you then have to stop using the image and remove it everywhere it was published. If you cannot produce a list of where a given photo currently lives, you cannot comply with a revocation, which means you need a usage log rather than a folder.
• A patient posting their own photo does not authorize you to repost it. Their disclosure is theirs. Yours is separate and still requires authorization.
• De-identification is harder than it looks. Cropping the eyes out of a facial before and after rarely de-identifies it. When in doubt, get the signature.

The Office for Civil Rights has taken enforcement action against providers for exactly this: publishing patient images and stories in marketing without valid authorization. An unauthorized disclosure can also constitute a reportable breach, which turns a marketing mistake into a notification obligation.

None of this is affected by an advertising platform relaxing its creative rules.

Meta deciding it will accept your image has no bearing on whether you were permitted to take it public.

The FTC and your state board

Federal truth in advertising rules still apply to what a photograph implies. Images should be of actual patients, should not be retouched in any way that alters the represented result, and should not present an exceptional outcome as a typical one without disclosure. The same principles that govern testimonials and reviews govern results imagery, because a before and after is a results claim rendered visually.

Separately, state medical and cosmetology boards maintain their own advertising rules, and they vary meaningfully by state. Some address before and after imagery directly, including requirements around disclosure and photo conditions. Your board's rules can be stricter than anything discussed above, and they are the ones attached to a license. Check yours before you build a campaign around this.

What does a compliant before and after look like now?

If you are going to use them, use them properly. Most of what makes an image compliant also makes it more persuasive, which is convenient.

• Control the variables. Same lighting, same angle, same distance, same expression, same makeup state. If the after photo is better lit than the before, you have created a misleading comparison and a viewer who can tell.
• State the timeframe and the treatment. "Twelve weeks, three sessions" is more credible than an unlabeled pair, and it is the difference between a result and an implied miracle.
• Write copy that describes the treatment, not the viewer. The line to stay behind is any framing that implies the person seeing the ad has a problem.
• Drop absolute and medical language. Erase, cure, eliminate, permanent, and guaranteed all read as claims.
• Get the signature before the upload, not after. Authorization on file, logged, with the publication locations recorded.
• Contain the test. Run new creative in a separate structured campaign rather than distributing it across the account, so a rejection stays a rejection instead of becoming an account-level flag.

So should med spas go back to leading with before and afters?

Not as the primary creative. Three reasons, and none of them is that it is against the rules.

The risk is asymmetric. A rejected ad costs you an afternoon. A restricted or disabled ad account costs you a quarter and a rebuild. Policy transitions are precisely when automated enforcement is least predictable, which makes the first months after a change the worst possible time to bet an account on the new latitude. Use the room, do not lean on it.

Scarcity was doing some of the work. Part of what made a before and after arresting in aesthetics was that relatively few practices were running them in paid placements. That is about to stop being true. Within a few months, the format will be common in every competitive market, and a creative approach that everyone adopts stops differentiating anybody.

It answers the wrong question. A before and after proves the treatment works. Useful. But the objection that actually stops a patient from booking is rarely "does this work." It is "do I trust this specific person with my face." A photograph of somebody else's results does not address that at all.

Why video still leads

The argument for video in aesthetics used to lean partly on policy constraint. That crutch is gone, and the argument is stronger without it.

Wyzowl's 2026 State of Video Marketing found 91 percent of businesses now using video as a marketing tool, with 82 percent of video marketers reporting good return. That second figure is down from 93 percent the previous year, which is the most useful number in the report. More businesses making video means more businesses making mediocre video, and the average return fell accordingly. Most of that gap is the difference between recording content and producing it.

Adoption is no longer the advantage. Quality is.

The same research found 91 percent of consumers saying video quality affects their trust in a brand, up from 87 percent the year before. In a category where the purchase is a stranger putting a needle in your face, trust is not a soft metric. It is the entire conversion.

There are four practical reasons video remains the lead asset for an aesthetic practice.

• It answers the trust question directly. A practitioner explaining a treatment, in their own room, in their own words, gives the viewer the thing a results photo cannot: a read on the person. Patients are evaluating judgment and manner as much as outcome.
• It sits outside most of the policy surface. A before and after is a claim about a result, which drags it into every rulebook described above. A practitioner explaining what a treatment is, who it suits, and what recovery looks like is education rather than a results claim, and it carries far less enforcement exposure across every one of those regimes.
• One shoot produces assets everywhere. The same footage becomes ad creative, Reels, a website hero, a YouTube upload, a consultation follow-up, and an email. A before and after works in a gallery and a feed post. The cost per usable placement is not close.
• It creates text for answer engines. Video with a real transcript published alongside it produces indexable, quotable content about your specific treatments in your specific words. As more patients start their search inside an AI assistant rather than a results page, having substantive text tied to a named provider is worth more than another image file.

The right structure is not video instead of before and afters. It is video as the lead asset that earns attention and builds trust, with compliant results imagery supporting it further down, where the viewer has already decided they like you and is now checking the work.

What to do this month

1. Read the current Health and Wellness policy in Meta's Transparency Center yourself. It takes ten minutes and it is the difference between knowing and repeating.
2. Check Events Manager for a health and wellness classification on your data source, and see which optimization events you actually have available.
3. Audit the names of your custom audiences, custom conversions, and events for anything implying a health trait. Rename before it gets disabled.
4. Pull every patient image currently published across your site, galleries, and social accounts, and confirm a signed 164.508 authorization exists for each one. Fix the gaps or take the images down.
5. Build the usage log, so a revocation request is a ten minute task rather than a scramble.
6. Check your state board's advertising rules for anything specific to results imagery.
7. Book the video shoot. That was the right move before the policy changed and it is a better one now that the constraint argument is off the table.

Common questions

Can I run before and after photos in Facebook and Instagram ads now?

Under the policy as updated on July 22, 2026, side by side and before and after imagery for cosmetic products, procedures, and surgeries is no longer automatically rejected. It becomes a violation when paired with prohibited claims, such as statements implying the viewer is inferior or unsubstantiated efficacy promises. Expect inconsistent enforcement while automated review adjusts, and verify the current policy text before you build a campaign on it, since Meta revises this wording regularly.

Do I still need patient consent if Meta allows the image?

Yes, and this is the most important sentence in the article. Meta's advertising policy and the HIPAA Privacy Rule are unrelated. A photograph of an identifiable patient used to promote your practice requires a signed authorization under 45 CFR 164.508 regardless of what any platform permits. A platform accepting your ad is not permission to have published the image.

Will my previously rejected ads work if I resubmit them?

Possibly, if they were rejected for the imagery or the product category alone and the copy is clean. If the rejection touched a claim, resubmitting the same ad will produce the same result and will add another violation to an account history that already has one. Rebuild the copy first, and appeal rejections you believe are wrong rather than quietly editing compliant ads into weaker ones.

Does this apply to organic posts too?

Advertising standards govern paid placements. Organic posts fall under Community Standards, which are generally more permissive on this kind of imagery. That said, HIPAA does not distinguish between paid and organic at all. The authorization requirement is identical for a feed post and a media buy, and organic is where most unauthorized patient images actually live.

Should I stop making video now that before and afters are allowed?

No. The policy constraint was one argument for video and never the strongest one. Patients choosing an aesthetic provider are evaluating the provider, not only the outcome, and that is a question a results photo structurally cannot answer. Video also stays useful across ads, organic, website, follow-up, and AI search in a way a single image never does.

How do I know if my ad account is classified as health and wellness?

Check the data source settings inside Events Manager, where the assigned category is visible. If the classification looks incorrect for your business, it can be appealed, though appeals take time and do not always resolve in the advertiser's favor. Plan campaigns around the restriction you currently have rather than the one you hope to get removed.

Policy changes. Strategy should not swing with it.

The practices that handle this well will not be the ones who reacted fastest to a rule change. They will be the ones whose creative was never dependent on a single format that a platform could restrict or unrestrict at will.

Meta moved one of four rulebooks. HIPAA, the FTC, and your state board did not move at all, and the tracking restrictions that quietly cap what a med spa campaign can optimize toward are still exactly where they were.

H Marketing Agency builds video, advertising, and booking systems for med spas and aesthetic practices, with most of our work concentrated in Orange County and Southern California. Creative that is compliant by construction rather than by appeal, and campaigns built so a policy update is a note in a meeting instead of a rebuild.

If you want a straight read on what your current ad account is permitted to do, book a free consultation or call (949) 877-7987.

Related reading: why boosting posts wastes budget and why 11 Google reviews loses and 300 wins.