Adding a GLP-1 or Peptide Program to Your Med Spa: Ownership, Supervision and Sourcing (2026)

Checked October 18, 2026. State rules change every legislative session; this is a map, not legal advice.

Who can own the med spa

Ownership follows each state's corporate practice of medicine rules (see our friendly PC and MSO guide):

Supervision and the medical director

California. RNs and PAs work under physician supervision. The supervising physician doesn't have to be on site but must be "immediately reachable," and the Board warns against "a paper-only supervisor" (Medical Board of California).

Texas. Delegated cosmetic procedures need signed written protocols reviewed annually. They also need a physician, PA or APRN on site or immediately available, and the delegating physician's name, license number and complaint information posted in public areas and treatment rooms (22 TAC §169.27). Since September 1, 2025, "Jenifer's Law" limits elective IV therapy outside a physician's office to orders from a physician or delegated PA/APRN. It can be given only by a physician, PA, APRN or RN, under adequate physician supervision (HB 3749).

Florida. A physician supervising NPs or PAs in an office that primarily offers skin care, with no physician on site, must be board certified or eligible in dermatology or plastic surgery. They may supervise only one such office besides their primary location, within 25 miles or a contiguous county (Fla. Stat. 458.348).

Whatever the state, the medical director has to actually direct: review protocols, be reachable, and see the charts. Absentee "name-only" directors are a recurring enforcement theme.

The good-faith exam

Before a prescription treatment, a qualified clinician has to examine the patient. California's Board of Registered Nursing puts it plainly: patients "must be examined by a physician or an advanced practice [nurse] … or a physician assistant, before treatments are administered" (BRN). In Texas, the delegating physician or supervised APRN/PA establishes the practitioner-patient relationship and keeps a record.

Telehealth good-faith exam services fill this gap for many spas. Qualiphy, for example, sells exams by nurse practitioners at $27.99 each with no monthly fee (Qualiphy). An exam vendor doesn't replace the rest of the structure, though. You still need a lawful owner, state-required supervision, lawful drug sourcing and follow-up monitoring, and a remote exam must meet your state's telehealth standard.

Sourcing: where most med spas get into trouble

• Patient-specific prescriptions only. Compounded GLP-1s come from a 503A pharmacy filling a prescription for a named patient. Multi-dose vials kept as office stock and drawn for whoever is booked is a recurring violation pattern. See 503A vs 503B for where compounded semaglutide and tirzepatide stand.
• No research-grade products. Ohio's Board of Pharmacy has said research-use-only drugs are unlawful for clinics and med spas to possess. By June 2025 it had issued more than ten summary suspensions of clinic drug licenses over unapproved and improperly sourced injectables (American Med Spa Association). On peptides specifically, see which peptides are allowed.
• Check your pharmacy. A July 2026 secret-shopper study of 75 weight-loss clinics and med spas found supplying pharmacies without sterile-compounding licenses, and several with recent discipline or FDA warning letters (University of Colorado summary). Verify licenses in your state and look the pharmacy up in FDA's warning letter database.

Marketing your program

The FDA rules that hit telehealth brands apply to med spas too. Don't say a compounded product is "the same as Ozempic," "generic," "FDA-approved" or "clinically proven," and don't promise a number of pounds (FDA). Consent forms should say when a product is compounded, and compounded drugs aren't FDA-approved. If you plan to advertise prescription treatments on Meta or Google, you'll need LegitScript certification.

A checklist before you launch

1. Confirm your ownership structure works in your state.
2. Sign a medical director or supervising physician who will actually supervise, with written protocols.
3. Set up good-faith exams by a physician, NP or PA, in person or by compliant telehealth.
4. Contract a licensed 503A pharmacy for patient-specific prescriptions, and keep invoices, lot numbers and storage logs.
5. Write consent forms and marketing to the FDA and FTC rules.
6. Plan follow-up: dose changes, side effects and when to stop.
7. Check your malpractice policy covers the program.

Want to extend the program beyond your local patients? A telehealth brand under your name can serve patients statewide or nationally through a clinician network. See the partners compared.

---