How Meta's Health and Wellness policy classifies telehealth, prescription drugs, and wellness products
Meta's Advertising Standards treat health-related offers differently depending on category. The Health and Wellness policy covers ads for dietary, health, and weight loss or weight gain products and services, which must be targeted to people at least 18 years old. The Drugs and Pharmaceuticals policy prohibits promoting illicit or recreational drugs, and Meta requires online pharmacies and telehealth providers to be actively certified with LegitScript before they can advertise. When targeting people 18 and older, advertisers can run ads for dietary weight loss or weight gain products such as supplements or pills, with the ad able to show people using the product and its impact, clearly indicating the time taken to achieve noticeable results.
For agency and in-house teams managing multiple regulated brands, ownership matters: Meta's Advertising Standards state that if you manage ads on behalf of other advertisers, each client must be managed through separate ad accounts, and you must not change the advertiser associated with an established ad account. Ensuring clean billing and admin access per advertiser is a baseline before any regulated health campaign launches.
2026 policy updates and restrictions on health data and condition-specific targeting
Meta does not use sensitive personal data for ad targeting, and its Business Tools terms restrict advertisers from sharing data based on or including health information about people. Practitioner reporting describes a three-tier data-sharing restriction system for health and wellness advertisers: core setup (limited custom parameters, catalog sync, and advanced matching), restriction on certain standard events (blocking optimization toward mid- and lower-funnel events like purchase), and full restrictions where Meta Business Tools cannot be used for campaign optimization in restricted regions.
In 2026, Meta introduced an AI-powered pixel enrichment feature that automatically pulls page and product details into event data — but advertisers whose data sources already have data-sharing limits, including those in health-related categories, are excluded from the new AI feature, and the same constraints apply to CAPI. Meta's own help documentation states that when the detailed page and product information feature is enabled, the Pixel can automatically detect and transmit page details, product details, and business details — and that it is the advertiser's responsibility to ensure their Meta Pixel integration does not share prohibited information with Meta. If a restriction is applied, Meta may limit daily spend, payment features, or advertising features while it verifies the advertiser is consistently following policy.
When LegitScript certification and written Meta pre-approval are required
Two documented certification gates exist for regulated health advertisers. First, Meta requires online pharmacies and telehealth providers to be actively certified with LegitScript. Second, for addiction treatment ads targeting people in the United States, Meta requires advertisers to be certified with LegitScript and to apply to Meta for permission to advertise.
For other categories, written Meta pre-approval is policy-specific: Meta's Advertising Standards note that for policies requiring prior written permission, Meta may grant these permissions. Movie trailers, TV shows, and similar entertainment ads are one documented example requiring prior written permission and 18+ targeting. Meta does not publish a guaranteed timeline for LegitScript-dependent approvals or Meta permission applications, so plan launches with buffer time and do not schedule spend against an assumed approval date. Note also that LegitScript certification and Meta permission attach to the advertiser and its compliance posture — an agency ad account does not substitute for either, and helping anyone evade or circumvent Meta's enforcement is prohibited.
Personal attributes and body-image rules that trigger automated ad rejections
Meta's Privacy Violations and Personal Attributes policy prohibits ads that assert or imply personal attributes, including direct or indirect assertions about a person's physical or mental health, medical conditions, disability, race, ethnicity, religion, age, gender identity, sexual orientation, and financial status. Ads cannot imply that the advertiser is aware of medical information about a user or their family. Ads can use "you/your" language without a personal attribute and can make public service announcements about health issues as long as they don't assert that someone or their family has a health condition.
The Health and Wellness policy adds body-image-specific triggers: ads must not contain statements of inferiority about physical appearance — terms, descriptions, or questions that negatively attack an individual's appearance, specific body parts, or hygiene — and must not depict close-ups of specific body areas by pinching fat. Practitioner reporting from women's health brands suggests automated review can also flag benign skin-visible imagery, so creative testing should anticipate false positives and manual review requests.
Meta's list of common policy violations is explicitly non-exhaustive, so passing one review does not immunize future ads. Unacceptable Business Practices guidance also prohibits deceptive or exaggerated claims about health-related benefits of a product or service, a common rejection trigger for supplement and wellness copy.
Evaluating agency ad account infrastructure?
Review dedicated agency ad accounts across Meta, TikTok, and Google, with compartmentalized billing, access custody, and human-led escalation.
Explore Agency AccountsPre-launch compliance checks for creatives, landing pages, and account structure
Before launch, health and wellness advertisers should audit four areas. Creatives: verify age targeting is 18+, copy avoids personal-attribute assertions ("Do you suffer from X?" is a common rejection trigger), and imagery avoids prohibited body-focus depictions. Landing pages: Meta's standards require ads to clearly represent the company, product, or brand, and the products and services promoted in the ad must match those on the landing page. Data pipelines: review every Pixel placement — practitioner guidance specifically warns against placing a Pixel on patient portals, since first-party health data transmitted to Meta can trigger data-sharing restrictions; use coded event names that don't reference health conditions. Account structure: each client advertiser gets its own ad account; do not repurpose established accounts across advertisers.
Layer in operational safeguards: Meta offers peer approval so ads require review by a trusted user before publishing, with options for domain security and country restrictions — useful when partners or agencies have ad account access. If restricted, an admin can request a review via Business Support Home; Meta says reviews are typically completed within 48 hours, though it may take longer, and there is a limited number of review attempts with the final decision being final. Offboarding planning matters too: a restricted personal profile cannot advertise, and ad accounts where they are the only attached user may also be disabled, so ensure multiple admins and document billing ownership before any enforcement event.