Skip to main content

Ad Account Rescue

Ad Account Rescue for Healthcare Advertisers: What Your Meta, Google, TikTok or Microsoft Ads Restriction Actually Means

On this page

Every restriction a healthcare advertiser gets from Meta, Google, TikTok, Microsoft or any other ad platform sits on one of three layers. An account-level restriction stops an ad account, business portfolio, Page or person from advertising at all. A data or event-level restriction lets your ads keep running but limits which events, parameters and audiences the platform will accept from your website. An ad rejection stops one ad and leaves the rest of the account alone. The wording of the notice, and where it appears, tells you which layer you are on. Each layer has a different fix.

Curve Compliance helps healthcare advertisers get the tracking side of this right. Curve's team reviews what your website sends to your ad platforms with you and shows what in that data is likely triggering a flag, then rebuilds your conversion tracking so it is HIPAA-compliant and keeps your campaigns optimizing. PHI-like patterns are detected before data reaches an ad platform, and a BAA is signed on every plan. Book a call with Curve.

Meta

Google

TikTok

Microsoft Advertising

Other platforms

Before you do anything else

Which layer is your restriction on?

Start with where the notice appeared, not with what you think caused it. The fixes for each layer do not overlap.

  • Account level. On Meta it shows in Business Support Home under Account status overview, and can cover a business portfolio, ad account, Page or person's profile. Google sends an in-account notification and an email. TikTok marks the ad account suspended. Every ad in the affected account stops.
  • Data or event level. On Meta it shows in Events Manager: a data source category on your dataset, a message in the Diagnostics tab, or a notice that "potentially prohibited information was removed from the data you're sharing". Ads keep delivering, but conversions go quiet or the events you optimized for stop being available. Google's closest equivalent is its personalized advertising policy, which limits the audience data health advertisers can use.
  • Ad level. One ad is rejected or disapproved, usually for a claim, an image or the landing page, and the rest of the account keeps running. Repeated rejections are how many account-level problems start. On Google, "Temporary account holds will be applied for the first and second strikes (for three and seven days respectively), while the third strike will result in an account suspension."

Account-level restrictions: fix the cause, then ask once

An account-level restriction is a judgement about the advertiser. Each platform offers one review path, and every use of it counts.

On Meta, an admin requests a review in Business Support Home: select Account status overview, choose the restricted account, then select Request review under What you can do. Meta says "Typically, our review is completed in 48 hours, although it may take longer in some cases." It also says "There is a limited number of times you can request an advertising restriction review. Once the review is completed, the decision is final." If the account comes back, "Any ads running before the restriction will not be automatically restarted."

On Google, the appeal starts from the Contact Us link in the suspension notification, and some advertisers must pass advertiser verification before they can appeal at all. Google says "We only reinstate accounts in compelling circumstances, such as in the case of a mistake". On TikTok, "You should receive a reply within two business days of submitting your appeal", and TikTok asks you to "only file one appeal for each incident."

Because reviews are limited, spend yours after the cause is fixed: the claim rewritten, the landing page changed, the verification documents matching the business. A review that shows the platform the same material again is asking it for the same answer.

Data-level restrictions: what Meta and Google limit

Meta assigns categories to data sources "based on the topics related to the data source and the products and/or services provided". Its Health and wellness category covers anything "associated with medical conditions or specific health statuses, provider/patient relationships, services for accessing personal health information, or health-related products and services", and its examples include a "telemedicine platform" and a "pharmacy". For most clinics and telehealth brands, the category describes the business accurately.

A category can carry one of three restrictions. Core setup "Restricts the sharing of custom parameters and parts of URLs following the domain." A restriction on certain standard events "Restricts the sharing of specific mid and lower funnel events", which is where booking and purchase events usually sit. Full restrictions "Fully restrict the sharing of all events in specific regions or all regions." While any data restriction is in place, "custom events are automatically blocked until you review and confirm them".

You can edit a category you chose yourself, but "you will not be able to modify a Meta-assigned categorization for your data source." If you think Meta's category is wrong, request a review from Manage data source categories in Events Manager, and Meta will email its decision.

Google limits health data through audiences. "Content related to Health is a sensitive interest category", and for those Google says "You can't use advertiser-curated audiences", such as Customer Match, your data segments, audience expansion and lookalike segments. Ads get flagged for the personalized advertising policy, and the fix is in your targeting, not your creative.

What cannot be worked around, and why

Platforms judge the advertiser: the business, the domain, the offer and the people behind it. The usual shortcuts change the route, the name or the login and leave that untouched, and each adds a second, more serious violation to the first.

  • A new ad account, Page or business portfolio. Google lists "creating new accounts to re-enter the system" under circumventing systems, and Meta may restrict or disable accounts and business assets created or "repurposed to evade a previous account or entity removal". Read what to do instead of opening a new account.
  • Sending the same events server-side. An event sent through the Conversions API lands in the same dataset, under the same category, as one sent from the browser pixel. Read why server-side tracking does not change a health restriction.
  • Renaming events. Meta says the names of your events, conversions and Custom Audiences "must not reflect, imply, or be based on any prohibited information", and "You must not attempt to send data that has previously been detected and removed."
  • Recategorizing your dataset out of Health and wellness, or moving the site to a new domain or dataset so the category does not follow. A fresh data source for the same business still describes the same business.

The compliant path

The only way back the platforms publish is to fix the cause they named and use their own review. While you wait, work inside what they still allow. On Meta that can mean optimizing for events you may still send. Meta itself suggests "leveraging more upper-funnel events", and under full restrictions, objectives such as Awareness, Engagements and Traffic. In order:

  1. Screenshot the notice and note exactly where it appeared.
  2. Name the layer: account, data or ad.
  3. Do not create new accounts, Pages, business portfolios, domains or datasets, and do not rename events or resubmit the same ad.
  4. Fix the cause the platform named: the claim, the landing page, the verification documents, or what your site sends.
  5. Request one review, as an admin, through the platform's own path.
  6. Keep measuring what your campaigns actually book, so you can tell when the fix has worked. A HIPAA-compliant attribution tool such as Curve Compliance ties each booking in IntakeQ, Calendly or Jane back to the ad that sent it, so that measurement doesn't depend on events the platform no longer receives.

Talk to Curve

If a notice has put your healthcare ads at risk, you don't have to work out the tracking side alone. Curve's team will look at what your site sends to Meta, Google and TikTok, show you what is likely causing trouble, and set up HIPAA-compliant conversion tracking that keeps your campaigns optimizing, with a BAA signed on every plan. Setup is done for you and typically live in about a week, so book a call with Curve.

How Curve helps

  • Curve's team reviews what your website sends to Meta, Google and TikTok with you, and shows what is likely triggering the flag.
  • Curve rebuilds your conversion tracking so it is HIPAA-compliant and keeps your campaigns optimizing, sending conversions server-side to Meta Conversions API, Google Ads, TikTok, Microsoft and LinkedIn.
  • Curve detects PHI-like patterns before data reaches an ad platform.
  • Curve keeps attribution through booking tools such as IntakeQ, Calendly and Jane, so booked patients are credited to the channel that sent them.
  • Curve signs a BAA on every plan, and Curve's team does the setup for you, typically live in about a week (it varies case by case).

Frequently asked questions

How does Curve Compliance help after a restriction?

Curve's team reviews what your website sends to Meta, Google and TikTok with you and shows what in that data is likely triggering a flag. Curve then rebuilds your conversion tracking so it is HIPAA-compliant and keeps your campaigns optimizing, with a BAA signed on every plan. Book a call with Curve.

Is a Health and wellness data source category the same as an ad account restriction?

No. The category limits which event data Meta accepts from your data source, and your ads can keep running. An account restriction stops ads from running at all.

Can we get Meta's Health and wellness category removed?

If Meta assigned it and you believe it is wrong, request a review from Manage data source categories in Events Manager, and Meta will email its decision. If you run a clinic, telehealth service or pharmacy, the category matches Meta's own definition, and the realistic goal is to work within it.

Should we open a new ad account while we wait?

No. Google and Meta both treat accounts created to keep advertising after enforcement as circumvention, and linked assets can be restricted with them. Here is what to do instead.

Will server-side tracking or the Conversions API bring our events back?

No. Meta's restrictions apply to your data source whichever route an event takes, and Meta forbids re-sending data it has detected and removed. Read why.

How long does a Meta review take?

Meta says "Typically, our review is completed in 48 hours, although it may take longer in some cases." The number of reviews is limited and the decision is final, so fix the cause before you request one.

Sources

Last verified

Talk to Curve about the data side of your restriction

Book a call and Curve's team will look at what your site sends to Meta, Google and TikTok, and show you the compliant setup that keeps your campaigns optimizing.

Book a call