Every medspa that performs medical procedures is required by law to operate under physician oversight. In most states, that means a designated medical director — a licensed physician responsible for clinical protocols, staff supervision, and the standard of care delivered by the practice. It's the requirement that makes a medspa a medical facility rather than a spa that happens to offer medical treatments.
The gap between what the medical director role is supposed to be and what it often is in practice is one of the most significant patient-safety issues in the aesthetic industry.
What the role is supposed to be
A medical director, in the regulatory sense, is responsible for establishing the clinical protocols a practice follows — which procedures are offered, how they're performed, what products are used, and what training staff members must have before performing each procedure. The medical director is also responsible for patient evaluation criteria: determining which patients are appropriate candidates for which treatments, and when a patient should be declined or referred elsewhere.
In a well-functioning practice, the medical director reviews treatment outcomes, addresses complications, supervises staff training, and is available for consultation when a clinical question arises during treatment. The medical director may or may not perform treatments directly, but their oversight is supposed to be active, not titular.
The ghost director problem
The American Medical Association's April 2026 report cited research finding that approximately 70% of medspas are not affiliated with a traditional physician practice. Many of these operate under what regulators have begun calling "ghost" or "matchmaker" medical director arrangements — a physician whose connection to the practice is primarily contractual and financial rather than clinical.
In the typical ghost-director arrangement, a physician agrees to serve as medical director for a monthly fee. They sign the required paperwork, their license is displayed at the facility, and their name satisfies the regulatory requirement. But they rarely visit the clinic, have limited involvement in clinical decision-making, may not know the staff performing procedures, and may be serving as medical director for multiple facilities simultaneously.
New York's 2026 medspa investigation specifically identified the absence of meaningful physician oversight as a systemic violation across the more than 200 facilities it inspected. Holland & Knight's August 2026 compliance analysis noted that regulators in New York, Georgia, and other states are now directly targeting these arrangements — a shift that reflects how widespread the problem has become. It's also compounded by a structural gap: 36 states have no medspa-specific regulations at all, which means in most of the country there's no framework written specifically to catch a nominal medical director relationship before a patient is harmed.
The consequence for patients is that the medical infrastructure they assume exists — qualified physician review of their treatment plan, availability of a physician if something goes wrong, clinical protocols designed and supervised by someone with medical training — may be nominal rather than functional.
How to evaluate the medical director at your medspa
Three questions give you a practical read on whether the medical director relationship is real.
Can the staff tell you who the medical director is, by name, without checking? In a practice where the medical director is genuinely involved, the staff knows who they are. If the front desk pauses or has to look it up, the director's involvement is likely limited.
Is the medical director on-site regularly, and can you consult with them? The answer doesn't need to be "they're here every day" — many legitimate practices have medical directors who are present on specific days or available by phone during procedures. The answer that should concern you is "they're available if needed" with no specifics about how that availability actually works.
Does the medical director have relevant credentials for the procedures offered? A medspa specializing in injectables and laser treatments ideally has a medical director with training in dermatology, plastic surgery, or a closely related field. A physician whose practice is in an unrelated specialty and who serves as medical director as a side arrangement may lack the clinical expertise to meaningfully oversee the procedures being performed.
Why it matters for your safety
Aesthetic procedures, even those marketed as noninvasive or minimally invasive, carry real medical risks. Vascular occlusion from filler, adverse reactions to neurotoxins, burns from laser treatments, and infections from inadequate sterile technique all occur in clinical practice. When they do, the quality of the medical response depends on the clinical infrastructure — which is, in large part, what the medical director is supposed to have built.
In a practice with genuine medical direction, complications are managed within a system designed for them: protocols are established, staff is trained on emergency response, and a physician is accessible when clinical judgment is needed. In a practice with nominal medical direction, a complication may be managed by a staff member who hasn't been trained for it, without access to a physician who can intervene.
The bottom line
The medical director is the structural guarantee that a medspa operates as a medical practice, not just a business that happens to offer medical procedures. That guarantee is only as strong as the director's actual involvement. Asking about the medical director — who they are, how they're involved, and whether their oversight is real — is the single most revealing question you can ask about a medspa's quality of care.
Looking for a consumer protection provider?