Rook Consulting
Wellness and integrative medicine

HIPAA compliant marketing for wellness and integrative medicine

By Christiana Clancy, founder of Rook Consulting
Updated October 16, 2026
The short version

Wellness and integrative practices often run on cash pay, memberships, IV therapy, hormone and weight programs and results-driven ads. Some fall outside HIPAA, but the FTC's rules on health claims, health data and reviews apply either way.

Where the risk shows up

  • Results claims and testimonials for weight, hormone or longevity programs without scientific support
  • Pixels on intake, program and booking pages
  • Membership apps and portals that hold health history and lab results
  • Promotional texts and emails to clients who only agreed to appointment messages
  • Reviews collected with incentives or posted by staff without disclosure

What the record shows

HIPAA applies to covered entities, which include health care providers that conduct certain transactions electronically, such as billing health plans (HHS). A cash-pay practice can fall outside that definition.

The Federal Trade Commission’s Health Products Compliance Guidance, issued December 20, 2022, covers health claims generally and expects them to be backed by competent and reliable scientific evidence, usually human clinical trials (Covington).

The Federal Trade Commission’s expanded Health Breach Notification Rule, effective July 29, 2024, reaches health apps and online services outside HIPAA, and treats sharing health data with advertisers without consent as a breach (Morrison Foerster).

The Federal Trade Commission’s consumer reviews and testimonials rule, effective October 21, 2024, allows penalties of up to $51,744 per violation for fake testimonials, paid positive reviews and undisclosed insider reviews (Morgan Lewis).

How Rook helps

Rook reviews your practice’s marketing from the outside, then installs the safeguards and systems your team runs. Start with a free Marketing Risk Report, or see programs and pricing.

Patient financing

Make cash-pay care easier to say yes to.

Programs, packages and memberships are cash-pay, and the full price up front is where many clients stall.

RepeatMD + Affirm gives your patients flexible financing with a soft credit check, plus memberships and rewards in your own branded app. RepeatMD reports approval rates above 80%.

Explore RepeatMD

Opens RepeatMD’s site in a new tab. Rook Consulting is a RepeatMD referral partner and may be compensated when practices sign up through this link.

This page is general information about published regulations, enforcement actions and studies. It is not legal advice. Approval rates as reported by RepeatMD.

Keep reading
HIPAA compliant marketing for med spasHIPAA compliant marketing for chiropractorsWhat does the BetterHelp FTC case mean for healthcare marketing?Is the Meta Pixel HIPAA compliant on a medical practice website?

Find out where your practice stands.

Our free Marketing Risk Report reviews your public website, listings and reviews and shows you the top risks in about a minute.

Get your free Marketing Risk Report Book a 20-minute call