AI Receptionist for Med Spas: What It Can and Cannot Say

A med spa phone is busy in a specific way. Half the calls are logistics: hours, parking, pricing, rescheduling, where to park. The other half are people asking a version of "would this work on me?", which is the one question the phone cannot answer.

An AI receptionist works for a med spa when three limits are built in: no candidacy assessments or medical advice, anything that sounds like a complication goes straight to a clinician, and patient information follows your privacy rules. Inside those limits it answers, books and fills cancellations.

Here is how to set one up, and what to be careful about.

What it should handle

These are the calls where an AI receptionist is straightforwardly better than voicemail and usually better than a front desk that is already with a patient.

• Booking consultations. The main job. Answer, ask what they are interested in, offer two real times, write it to the calendar with the right provider and duration.
• Rescheduling and cancellations. Including the part most clinics do badly: when someone cancels, immediately working the waitlist to fill the slot. A blocked injector hour that goes unfilled is the most expensive thing in your week.
• Confirmations and reminders. Aesthetics has high no-show rates and high per-slot value, which is the worst combination. Our reduce appointment no-shows guide covers the cadence.
• After-hours calls. Most consultation requests come in the evening, when your front desk has gone home.
• Factual questions. Hours, location, parking, which providers work which days, whether you take a payment plan, what a membership includes.
• Published pricing. If a price is on your website, the agent can say it. If it is not, the agent books the consultation.
• Pre- and post-care instructions, but only reading back the exact document your medical director approved, never paraphrasing it.
• New lead follow-up. The form fill at 9:40 p.m. In an audit of 2,241 US companies, Harvard Business Review found only 37% responded to a web lead within an hour, and firms reaching a lead within an hour were nearly seven times as likely to qualify it as firms that waited an hour longer.

Where the medical line sits

This is the design question. Everything else is configuration.

The pattern is simple to state and easy to get wrong in practice: anything that requires evaluating a specific person's body, history or medication is a clinician's job, and the agent's job is to get them to one quickly and without making them feel dismissed.

A good decline sounds like a handoff, not a refusal: "That depends on a few things I'm not able to assess over the phone. Our injector can look at it properly. There's an opening Thursday at 2:15, would that work?"

Complication routing is the one that matters

Most of this article is about revenue. This part is not.

A caller describing swelling, severe pain, blanching, vision changes, fever or anything that sounds like a vascular event is not a scheduling conversation. The agent needs a hard rule that exits the normal flow immediately: stop qualifying, stop booking, connect to the on-call clinician or give the emergency instruction your medical director wrote.

Design this first, test it hardest, and test it at 2 a.m. on a Sunday as well as at 2 p.m. on a Tuesday. A trade business has the same structure around gas leaks and burst pipes, and the shape of the solution is the same: the safety question goes in front of everything else, not into the queue. We walk through that pattern in HVAC after-hours calls.

Your medical director writes this routing rule. Not your marketing agency, and not your vendor.

What HIPAA actually requires here

Worth getting right, because med spas get told two contradictory things about this.

A health care provider is a HIPAA covered entity when it transmits health information in electronic form in connection with a covered transaction, under 45 CFR 160.103. Many med spas are cash-pay and never submit electronic claims, which means they may not be covered entities at all. Many others do bill for medical services, or have a billing service that transmits on their behalf, which brings them in.

So the first question is which one you are, and that is a question for your attorney, not for a vendor's sales page. Two practical consequences:

• If you are a covered entity, your AI vendor is handling protected health information on your behalf and you need a business associate agreement with them. Ask for it in writing before launch. Ask also where recordings and transcripts are stored and for how long.
• If you are not, HIPAA may not apply, and state health privacy laws, state consumer privacy laws and plain patient expectations still do. Several states regulate health data well beyond HIPAA's scope. Build as if the information is sensitive, because it is.

Either way, configure the agent not to collect more than it needs. A receptionist booking a consultation does not need a medical history over text.

Consent, texting and recording

Texting. Confirmations and reminders to US local numbers require A2P 10DLC brand and campaign registration with the carriers, with fees and approval delays. Our A2P 10DLC registration guide covers the process.

Outbound calls and texts to leads. Consent-based only. The FCC confirmed in FCC 24-17 that AI-generated voices are artificial voices under the TCPA, so AI calls to leads need the same prior express consent as other artificial or prerecorded calls. Your consultation request form needs disclosure language next to the submit button, and consent cannot be a condition of treatment.

Recording. Federal law permits recording with one party's consent (18 U.S.C. 2511), and a number of states require everyone on the call to consent. Announce recording where that applies.

This is not legal advice. Confirm all of it with your own counsel and your medical director.

What the agent says is advertising

Easy to miss, because it feels like a phone call rather than a campaign. If the agent makes a claim about results, that claim is subject to the same substantiation standard as your ads.

The FTC's Health Products Compliance Guidance sets out the evidence needed to support health-related claims in advertising, and its guidance on endorsements and reviews covers testimonials and incentivized reviews. So: no "this will take ten years off," no "everyone loves their results," no quoting a patient review as a promise. The agent describes what a treatment is and books the consultation.

The budget side of this, including how much ad rework the restrictions cost you, is in med spa advertising budget.

What it costs

Billing follows the same models as any AI receptionist: per minute, flat tier, per answered call or per resolution. Which is cheapest depends on your call volume and average call length, and the crossover points are mapped in AI receptionist cost.

One med-spa-specific note on the math. Your per-slot value is high, so the number that justifies the whole thing is usually not cost per call. It is filled cancellations. One recovered $1,200 appointment a week pays for most receptionist setups several times over, and recovering cancellations is a job that requires someone to start working a waitlist within minutes of the cancellation coming in. That is not a human task.

Setting one up

1. Write the boundaries first. Candidacy, medical questions, complications, other people's care. Your medical director signs these off.
2. Write the complication routing rule, and name who is on call at each hour.
3. Give it the facts. Services, published prices, providers and their days, memberships, parking, the approved pre- and post-care documents.
4. Connect the calendar properly. Right provider, right duration, right room, right buffer. A booking in a vendor dashboard is not a booking.
5. Set up the waitlist flow so a cancellation triggers outreach immediately.
6. Configure disclosure and recording notices.
7. Test it as a difficult caller. Push for a candidacy answer. Describe a complication. Ask about someone else's appointment. Ask a question in Spanish. Try to book outside your hours.
8. Read transcripts weekly for the first two months and keep tuning.

We build these as part of our done-for-you AI appointment setters, on StrideOps, where agents respond in under 2 seconds and hand off whenever a question falls outside what they know. Every agent is tested in simulated calls before it talks to a real patient, and most clients are live in 2 to 3 weeks. The med spas and clinics page covers the rest of the setup.

FAQ

Can a med spa use an AI receptionist?

Yes, with boundaries. It can answer calls, book consultations, confirm appointments and fill cancellations. It should never assess whether someone is a candidate, answer medical questions or handle a possible complication, all of which route to a clinician.

Is an AI receptionist HIPAA compliant?

That depends on your clinic and your vendor. A provider is a HIPAA covered entity when it transmits health information electronically in connection with a covered transaction, so many cash-pay med spas may not be covered. If you are, you need a business associate agreement with the vendor. Ask your attorney which applies to you.

Can an AI tell a patient if they are a good candidate for a treatment?

No. Assessing a specific person's suitability is clinical judgment. A well-built agent says it cannot assess that over the phone and books the consultation.

What should an AI receptionist do if a patient reports a complication?

Exit the booking flow immediately and connect them with the on-call clinician, or deliver the emergency instruction your medical director wrote. This rule is designed first and tested hardest.

Will an AI receptionist help with no-shows?

Yes, in two ways. It runs the confirmation and reminder sequence consistently, and when a cancellation does happen it can start working the waitlist within seconds instead of whenever someone at the front desk has a free moment.

See it handle your actual calls

Send us a week of your call log and we will show you which calls an agent would have handled, which it would have routed, and what the filled cancellations would have been worth. Book a Stride Scaling Call.