A med spa does not face one nationwide rule requiring a medical director. The answer depends on state ownership rules, the services offered, the professionals performing them, and the location of each telehealth patient. Remote care usually adds requirements for licensure, patient-location checks, consent, documentation, prescribing, and clinical supervision; it does not replace them.
Does a med spa need a medical director?
A med spa may need a medical director, supervising physician, or physician-owned practice structure when it provides medical evaluation, injections, prescription treatment, laser procedures, or other delegated medical acts. The exact answer is decided primarily by state law and professional-board rules.
A business owner extending an established spa should separate three responsibilities:
- 1The spa or operating company: branding, scheduling, customer service, nonclinical marketing administration, facilities, technology coordination, and other business functions.
- 2The medical director or licensed clinical team: clinical protocols, patient assessment, treatment decisions, delegation, supervision, prescribing, records, quality review, and escalation.
- 3The platform: software and coordinated infrastructure such as intake, appointment workflows, communications, documentation tools, billing administration, and relationships that support the launch.
A title is not a substitute for actual clinical accountability. In some states, calling a physician a “medical director” will not cure an ownership or control structure that improperly gives a nonphysician business authority over medical practice.
For owners comparing operating models, the telehealth programs hub provides broader context for how clinical, technology, and administrative responsibilities fit together.
What changes when a med spa adds telehealth?
Telehealth changes the operating facts that regulators and clinicians must evaluate, even when the underlying service remains the same. The most important shift is that the patient’s physical location becomes central to licensure and scope-of-practice analysis.
HHS explains that cross-state telehealth requirements vary. Depending on the state, a clinician may need a full license, temporary authorization, reciprocity, a compact pathway, or telehealth registration. The provider should verify the patient’s location before the appointment and obtain consent when required.
A physician licensed where the spa is located may therefore not be authorized to supervise or treat a patient located in another state. A med spa needs a state-by-state map based on patient location, not only the facility address.
Telehealth may also alter how the practice establishes the practitioner-patient relationship, conducts an evaluation, decides whether an in-person examination is necessary, documents the technology used, and handles referrals or emergencies. The standard of care remains a clinical responsibility; a platform cannot make those decisions for the clinician.
Medical director duties before and after telehealth
| Responsibility | Primarily in an in-person spa | Additional telehealth question |
|---|---|---|
| Clinical protocols | Approve services, screening, escalation, and emergency procedures | Which services can safely begin or continue remotely? |
| Delegation | Define which licensed professionals may perform each act | Does the supervising clinician have authority where the patient is located? |
| Supervision | Set availability, chart review, competency, and on-site expectations | Is remote video, telephone, or asynchronous review allowed? |
| Patient evaluation | Document history, assessment, consent, and treatment decision | How will identity, location, modality, and remote limitations be recorded? |
| Prescribing | Establish criteria and clinical review | Are state and federal teleprescribing rules satisfied? |
| Records | Maintain complete clinical records and audit access | Are telehealth notes, consent, communications, and follow-up integrated? |
| Advertising | Review physician-involvement and outcome claims | Does marketing accurately describe remote evaluation and supervision? |
What should a med spa medical director actually own?
A written agreement should describe responsibilities rather than relying on a title. The following areas commonly require clinical ownership or review.
Clinical governance
The medical director or responsible clinical practice should approve services, define which procedures are appropriate for telehealth, set escalation and referral criteria, and review adverse events, complaints, and near misses. The business can coordinate implementation, but it should not independently decide what constitutes appropriate medical care.
Delegation and competency
The clinical structure should identify which physicians, nurse practitioners, physician assistants, registered nurses, aestheticians, or other personnel may perform specific services. It should address training, competency, availability, response expectations, emergency escalation, and chart or quality review where required.
The question “Can a nurse practitioner run a med spa without a physician?” cannot be answered nationally. Scope-of-practice, ownership, prescribing, and supervision rules vary by state. A platform or business consultant should not resolve that question without state-specific clinical and legal review.
Telehealth workflow
Clinical leadership should establish processes to:
- Verify patient identity and physical location.
- Confirm the treating clinician is licensed or otherwise authorized where the patient is located.
- Obtain telehealth consent when required.
- Record the modality and limitations of the encounter.
- Determine when an in-person examination, testing, referral, or emergency evaluation is necessary.
- Maintain continuity and follow-up procedures.
A questionnaire may support intake, but it does not automatically substitute for professional evaluation. Massachusetts disciplinary materials describe concerns involving telehealth prescribing, questionnaires, physical examination, and establishment of a valid physician-patient relationship.
Prescribing controls
The medical director should establish prescribing criteria and review state and federal requirements. The clinical team—not marketing, checkout, or software—must make individualized prescribing decisions.
DEA and HHS extended specified federal telemedicine flexibilities for controlled medications through December 31, 2026. Under that extension, DEA-registered practitioners may prescribe Schedule II–V controlled medications by audio-video telemedicine without a prior in-person evaluation, subject to federal and state requirements. This is not blanket permission for online prescribing. The practice still must verify licensure, DEA registration, state rules, examination requirements, documentation, identity controls, follow-up, and diversion safeguards.
Any medication program should use a clinician-led formulary and compliance review. Marketing must not imply that a compounded product is FDA-approved or equivalent to a branded product. This article does not recommend a medication or tell a clinician what to prescribe.
Records and advertising
Clinical records should remain under appropriate clinical control, with defined access, amendment, release, audit, and retention processes. Telehealth notes should contain enough information to support the applicable standard of care.
The FTC states that health advertising must be truthful, nondeceptive, and supported by appropriate evidence. That applies to websites, social media, testimonials, reviews, before-and-after content, and other promotional channels. A med spa should avoid implying that a medical director personally evaluates every patient, that telehealth is appropriate for every procedure, or that a service guarantees safety or a particular result.
How do state rules change the answer?
Rules vary by state. California, Texas, and Massachusetts illustrate why a national checklist cannot replace state review.
California: ownership and clinical control are central
The Medical Board of California states that corporations and other artificial entities generally do not possess professional rights or powers under Business and Professions Code section 2400. Clinical decisions—including diagnosis, treatment options, referrals, overall patient care, and physician staffing decisions—must remain with a California-licensed physician.
The Board warns against a nonphysician owning or operating a business that provides patient evaluation, diagnosis, care, or treatment; a management-services organization controlling the medical practice; or a physician serving merely as a “medical director” for a nonphysician-owned business offering procedures such as Botox, laser hair removal, or medical microdermabrasion.
Telehealth does not solve that ownership problem. A California med spa adding remote services should preserve physician control over clinical decisions, records, treatment protocols, clinical competency, and patient care.
Texas: delegation and supervision shape the model
Texas law recognizes telemedicine services delivered by a Texas-licensed physician or by a health professional acting under the delegation and supervision of a Texas-licensed physician. Texas rules address quality of care, fraud prevention, adequate supervision, and supervision of nonphysician professionals through telemedicine. Telemedicine also involves informed-consent and confidentiality requirements.
The Texas Medical Board states that a physician who delegates prescriptive authority must provide adequate supervision, but the supervising physician does not have to be physically present at all times. A Texas spa using APRNs, PAs, or other delegated personnel should document delegation arrangements, protocols, availability, informed consent, patient-location controls, and the supervision process.
Texas House Bill 3749 was an introduced 2025 proposal concerning a possible med-spa-specific framework. It should not be presented as current Texas law without confirming enactment and effective date.
Massachusetts: no mandatory initial face-to-face visit does not mean no clinical standard
The Massachusetts Board of Registration in Medicine approved a permanent telemedicine policy on June 25, 2020. The policy clarified that a face-to-face encounter is not required before providing care by telemedicine and stated that the standard of care is the same whether the patient is seen in person or through telemedicine.
Massachusetts materials still emphasize appropriate evaluation, physician-patient relationship requirements, informed consent, documentation, continuity, referrals, and recordkeeping. For a Massachusetts med spa, remote initiation may be possible for some care, but a clinician must decide whether telehealth is appropriate and gather enough information to meet the standard of care.
These examples show a range—not a national rule. Confirm the current requirements of every state where patients may be located before launch.
Can a medical director supervise a med spa remotely?
Sometimes, but the answer depends on the state, procedure, personnel involved, patient location, and required form of supervision. Remote availability may be permitted for some delegated activities, while an on-site physician or in-person evaluation may be required for others.
Do not use Medicare’s 2026 direct-supervision rule as a general med-spa rule. CMS states that, beginning January 1, 2026, Medicare’s definition of direct supervision may include real-time audio-video presence for certain services requiring direct supervision, with stated exclusions. That rule applies to Medicare-covered services and does not automatically determine private-pay med-spa practice or state medical-practice requirements.
For each service, review:
- 1Where is the patient located?
- 2Where is the treating and supervising clinician licensed?
- 3What professional may perform the act?
- 4Does state law require on-site, video, telephone, or another form of supervision?
- 5Is an in-person examination, testing, or referral needed?
- 6How will the encounter, decision, consent, and escalation plan be documented?
A launch checklist for adding med spa telehealth
Before the first remote encounter, create and review:
- A patient-location matrix covering every intended state.
- A provider-license and telehealth-authorization matrix.
- A written medical-director, ownership, or supervision agreement.
- Delegation protocols organized by procedure and provider type.
- A telehealth consent and identity-verification workflow.
- Criteria for when remote care is insufficient.
- A prescribing policy, including controlled-substance review.
- A medical-record access, audit, and chart-review policy.
- Clinical escalation and emergency-referral procedures.
- An advertising approval process for physician, safety, efficacy, testimonial, and outcome claims.
- A documented separation between administrative decisions and clinical decisions.
- A process for reviewing changes in state and federal requirements.
MDLaunchr is the brand behind WhiteLabelClinic.com, one infrastructure option for coordinating technology, operational workflows, compliance-oriented processes, clinical-network relationships, and fulfillment relationships involved in a telehealth launch. It is not a medical practice, regulator, law firm, or guarantor that a proposed ownership or supervision model satisfies state law. Explore how MDLaunchr and WhiteLabelClinic.com can support a compliance-first telehealth launch through the contact page.
Scope and disclaimer
This article is educational business information, not legal advice, medical advice, a determination of licensure, or a substitute for review by qualified healthcare counsel and licensed clinical leadership. State rules, board guidance, federal telehealth policies, and enforcement priorities can change. Confirm current requirements for each patient location, service, ownership structure, professional role, and medication before launch.
Related reading: How an OB-GYN Practice Can Offer Menopause Care Through Telehealth, What a White-Label Women's Hormone (HRT) Program Includes.
Written and reviewed by MDLaunchr's clinical and compliance team. We build white-label telehealth infrastructure for founders, creators, and healthcare operators—covering providers, pharmacy, technology, and compliance.
This article is for general informational and educational purposes only and is not medical, legal, or regulatory advice. It does not create a provider-patient relationship and should not be used to diagnose or treat any condition. Telehealth and compounding regulations vary by state and change over time—consult qualified legal, clinical, and compliance professionals before launching or operating a telehealth program.
Frequently asked questions
Does every med spa need a medical director?
No. There is no single federal rule requiring every med spa to have one; the answer depends on state law, ownership, services, personnel, and delegation.
Does telehealth require a physician medical director?
Not automatically. Telehealth can add licensure, consent, supervision, and patient-location requirements, while the need for a medical director or supervising physician remains state- and service-specific.
What are the main med spa medical director requirements?
They commonly involve clinical governance, delegation, supervision, prescribing controls, records, quality review, escalation, and advertising oversight, but legally required duties vary by state.
Can a medical director supervise a med spa remotely?
Sometimes. The permitted method may depend on the state, procedure, provider type, patient location, and whether law requires on-site or another form of supervision.
Can a med spa use a physician licensed only in the spa’s state?
Not necessarily. The clinician may need authorization in the state where the telehealth patient is physically located.
Can an APRN or PA provide med spa services under telehealth supervision?
Possibly, but scope of practice, delegation, prescribing, and supervision rules vary by state and service.
Can a med spa doctor prescribe without seeing a patient in person?
Sometimes a state may permit remote care without a mandatory initial face-to-face visit, but the clinician must still meet the applicable standard of care and prescribing requirements.
Do federal telemedicine rules override state med spa rules?
No. Federal rules such as the 2026 controlled-substance extension and Medicare supervision guidance do not automatically replace state licensure, ownership, scope, or supervision requirements.
Is a platform the same as a medical director?
No. A platform can support technology and administrative workflows, but independently licensed clinicians and the appropriate practice structure retain clinical responsibility.
What should a med spa review before offering telehealth treatments?
Review patient-location rules, licenses, ownership, delegation, supervision, consent, examinations, records, prescribing, emergency escalation, and advertising claims for each intended state and service.
Can a medical director approve every telehealth treatment through a standing protocol?
A protocol can support consistent operations, but it does not transfer individualized clinical judgment to the business or eliminate the clinician’s responsibility to evaluate whether a service is appropriate.
- Texas State Government — Oc.111268 What Are Texas Medical Boards Requirements Physician Who Delegates Aprn or Pa
- HHS Telehealth — Licensing Across State Lines
- California State Government — Practice Information
- Massachusetts State Government — Board of Registration in Medicine Approves Policy on Telemedicine
- Drug Enforcement Administration — DEA Extends Telemedicine Flexibilities Ensure Continued Access Care
- Centers for Medicare & Medicaid Services — Telehealth FAQ Updated 02 26 2026
- Federal Trade Commission — Health Claims