Skip to main content
Ad Account Rescue

TikTok rejected our lead ad because the instant form asks about health

The notice
Per our ad policies, you cannot use Lead Ads to request sensitive information, like financial or medical information.
On this page

TikTok rejected the ad because a question on your Instant Form asks for information its lead ads rules don't allow, and health is on that list. TikTok's Ad Format and Functionality policy says "Do not use our lead ads product to collect the following information from viewers, unless you have received written consent from a TikTok Sales Representative", and the list includes "Information concerning health, such as medical history, disabilities, mental or physical condition, or medical treatments". Insurance coverage and date of birth are on the list too, so even a short clinic form can trip it. The fix is to cut the form back to contact details and scheduling, attach the new form to the ad, and ask the clinical questions on your own website, in a HIPAA-compliant form such as Curve Forms from Curve Compliance.

Curve Compliance gives clinics that place to ask. Curve Forms are HIPAA-hosted intake and lead forms with ad attribution attached, hosted by Curve under the BAA Curve signs on every plan, so each inquiry is still credited to the TikTok ad that sent it. Curve then sends the conversion to TikTok server-side, as it does for Meta Conversions API, Google Ads, Microsoft Advertising and LinkedIn, with a fixed list of fields for each platform, and Curve detects PHI-like patterns before data reaches an ad platform. Book a call with Curve.

What the rejection means

TikTok's Ad Review FAQs answer this rejection directly: "Per our ad policies, you cannot use Lead Ads to request sensitive information, like financial or medical information. If you encounter this rejection reason, try updating your Instant Form or appealing the ad rejection from our Business Support channel."

The Ad Format and Functionality policy allows those questions only with a sales representative's written consent. TikTok's Lead Generation Terms, in effect since January 22, 2026, add a separate rule with no consent exception: "You must not use Lead Generation Products to collect any information defined as sensitive or special category data under applicable laws and regulations."

The rejection is about the form, not about whether a clinic can advertise. For the United States, TikTok's Healthcare and Pharmaceuticals policy says medical institutions "May be allowed if the following requirements are met", including "Comply with local laws and regulations" and "Restrict the ads to audiences aged 18 years or older". For the wider rules, see what TikTok's health rules allow for clinics.

Which questions count as health information

These entries from TikTok's list catch clinic forms most often. Each one is quoted from the Ad Format and Functionality policy:

  • "Information concerning health, such as medical history, disabilities, mental or physical condition, or medical treatments". That covers symptoms, diagnoses, current medications, past treatments, weight or BMI, and pregnancy.
  • "Insurance information, such as insurance policy numbers or insurance coverage". Asking whether someone is insured, or with which carrier, asks about coverage.
  • "User date of birth, year of birth, or exact age". TikTok's form editor offers a Date of birth field, but the policy still lists it.
  • "Information concerning a person's sex life". This one matters for ED, TRT and sexual health clinics.
  • "Information concerning a person's sexual orientation, including what gender(s) the person identifies with". This one matters for gender-affirming care and LGBTQ+ health programs.
  • A multiple-choice question counts too. A list of conditions or symptoms to pick from still asks about the person's health, even if nobody types an answer.

What a clinic's TikTok form can ask

TikTok's question types page splits a form into Personal Information questions and Custom Questions. Contact fields are the safe core, and TikTok says "Whenever possible, personal information questions will be auto-filled in with the information of logged-in TikTok users." For a clinic, keep the form to:

  • Name, phone number and email.
  • City, state or ZIP code, which TikTok lists as contact information.
  • A follow-up time. The Appointment Scheduling question lets people "select an Available Time for a follow-up call or appointment."
  • A preferred location, if you have more than one. TikTok's Business Locator question does this, though TikTok says "This feature is not available to all advertisers at this time".
  • How they'd like to be contacted, as a multiple-choice question with neutral answers such as call, text or email.
  • Which service they saw, without asking. Use one form per service or campaign. TikTok's Leads Center can sort leads by "instant form ids", so the form tells you what the ad offered.

Move health questions to your own HIPAA-hosted form

A TikTok lead campaign doesn't have to use an Instant Form. TikTok says the lead generation objective can "collect lead information on your own website", and one reason it gives for using your own form is to "Ask more detailed qualifying questions that TikTok instant form doesn't support." To set it up, choose Lead generation as the objective, select Website in the Optimization section and enter your page's URL. TikTok says "You must set up your TikTok Pixel for website optimization." That doesn't have to mean browser code on the form page: TikTok's Events API setup guide says "You can use Events API to set up web events with TikTok Pixel" and lets you set it up "as either a standalone integration or a second channel together with your TikTok Pixel."

Moving the form moves the answers off TikTok, but TikTok's data rules still apply to what your site sends. TikTok says "Make sure you don't use your TikTok Pixel on web pages where you may share personal health or financial information." It also asks you to "Review information included in forms on your website, as well as website events such as event names, product names, product IDs, custom properties and content names." TikTok's Events API is the server-side route, and TikTok says "With Events API, you only have to share the data required to meet your marketing objectives."

That is the setup Curve Compliance runs. Curve Forms are embedded on your own site, not inside TikTok's Instant Form. They're hosted by Curve under your BAA, and the ad and campaign that brought each person are attached to the lead. Curve sends the form submission to TikTok server-side through the Events API, under a neutral event name and with a fixed list of fields, and detects PHI-like patterns before data reaches an ad platform. Curve's Event Logs show what was sent and what TikTok accepted. See Curve Forms and TikTok conversion tracking with Curve.

The landing page needs care too. TikTok's Ad Review FAQs flag a page that "does not contain a Privacy Policy and requests sensitive personal information". Put the form on a page that explains the service, link your privacy policy, and set the privacy wording on the Curve Form itself. Server-side delivery controls what TikTok receives, but it isn't a way around a policy: see why server-side tracking doesn't lift a restriction.

Edit, resubmit or appeal

  1. In TikTok Ads Manager, click Campaign, find the rejected ad and click the Disapproved label. TikTok says "You'll see an explanation about why your ad or ad group was rejected or restricted." Click View more for the details.
  2. Copy the form. TikTok says "you cannot edit the form after you click Complete; however, you can copy an existing form from the Instant Page page, make changes to it and save it as a new form." Go to Tools, then Instant Page, copy the rejected form and delete every question on TikTok's list.
  3. Check the Privacy section. TikTok says "Lead ads must include a privacy policy." The editor asks for your Company Name and a link to your privacy policy.
  4. Click Edit ad and replace the attached Instant Form with the new one. TikTok says "you can replace an attached Instant Form", and "When you're finished, your ad will be submitted for another review." TikTok's lead generation FAQs say "Instant Form reviews can take up to 24 hours during standard operating hours."
  5. If the form never asked anything on TikTok's list, appeal instead of editing. In the Campaign tab, hover over the ad's Not delivering status, click View more, then Appeal. TikTok's One Click Appeal guide says the description field "accepts up to 2,000 characters", asks you to "only file one appeal for each incident", and warns "You cannot edit an Ad Group or Ad after you have submitted a One Click Appeal."
  6. If the appeal fails and you still believe the rejection is wrong, TikTok says self-serve accounts should submit a ticket from the appeal disapproval message, and managed accounts should reach out to their TikTok Sales Representative.

Check the rest of the account

Fix every form, not just the one that was rejected. TikTok's Account Health page flags ad groups that broke a policy, and its Attention Needed status says "You'll need to address any issues to avoid account restrictions or suspension." Find it under Tools, then Account setup, then Account Health.

Talk to Curve

TikTok's Instant Form works for clinics when it stays short and the clinical questions move to a form built for them. Curve's team sets up HIPAA-hosted Curve Forms with ad attribution attached and HIPAA-compliant, server-side conversions to TikTok and your other ad platforms, with PHI-like patterns detected before data reaches an ad platform. Curve Compliance is SOC 2 Type II and signs a BAA on every plan, and most customers are live in about a week. Book a call with Curve.

How Curve helps

  • Curve Forms are HIPAA-hosted intake and lead forms with ad attribution attached, so clinical questions stay on your own site instead of a TikTok Instant Form.
  • Curve sends conversions server-side to TikTok, Meta Conversions API, Google Ads, Microsoft Advertising and LinkedIn, with neutral event names and a fixed list of fields for each platform.
  • Curve detects PHI-like patterns, such as condition names and form answers, before data reaches an ad platform.
  • Curve's Event Logs show what was sent to TikTok and what TikTok accepted.
  • Curve signs a BAA on every plan, and Curve's team does the setup for you, typically live in about a week.
  • TikTok does not sign a BAA for its ad tools (TikTok in the BAA Directory), so nothing sent to TikTok should carry health information.

Frequently asked questions

Can our TikTok instant form ask which treatment someone is interested in?

Not without written consent from a TikTok Sales Representative. TikTok's list covers "Information concerning health, such as medical history, disabilities, mental or physical condition, or medical treatments", and a treatment choice can reveal a condition. Run one form per service instead, and ask the clinical questions on your own site in a HIPAA-compliant form such as Curve Forms from Curve Compliance.

Can a TikTok lead form ask for date of birth or age?

Not without written consent from a TikTok Sales Representative. TikTok's Ad Format and Functionality policy lists "User date of birth, year of birth, or exact age", even though the form editor offers a Date of birth field. Restrict the ad group to people 18 and older, and confirm age in your own intake.

Can a TikTok lead form ask about insurance?

Not without written consent from a TikTok Sales Representative. The policy lists "Insurance information, such as insurance policy numbers or insurance coverage". Ask about coverage after the lead comes in, in your own intake.

Does adding a privacy policy link fix the rejection?

No. TikTok says "Lead ads must include a privacy policy." That is a separate requirement, and the rule on sensitive information applies whether or not the form links a privacy policy. Remove the questions on TikTok's list, then check that the Privacy section links to your policy.

Can a TikTok sales representative approve health questions?

The ad policy's exception is "unless you have received written consent from a TikTok Sales Representative". TikTok's Lead Generation Terms separately say "You must not use Lead Generation Products to collect any information defined as sensitive or special category data under applicable laws and regulations." TikTok also doesn't sign a BAA (TikTok in the BAA Directory). Talk to your counsel before collecting health information in any TikTok product.

How do we appeal a rejected TikTok lead ad?

In the Campaign tab, hover over the ad's status, click View more, then Appeal, and explain the case in up to 2,000 characters. TikTok's One Click Appeal guide says "TikTok aims to provide a response within 24 hours, but may take longer in rare cases." If the form did ask about health, fix the form instead.

How do we keep TikTok attribution if the form is on our site?

Run the campaign with Website as the optimization location, and send each form submission back to TikTok as a conversion. Curve Forms from Curve Compliance attach the ad and campaign to each lead, and Curve sends the submission to TikTok server-side through the Events API, in place of the browser pixel and under a neutral event name.

How does Curve Compliance help clinics with TikTok lead ads?

Curve Forms from Curve Compliance are HIPAA-hosted intake and lead forms that run on your own website, not inside TikTok's Instant Form, with ad attribution attached. Point a lead generation campaign with Website optimization at that page, and Curve sends each submission to TikTok server-side with a neutral event name, under a BAA Curve signs on every plan. Book a call with Curve.

Sources

Last verified

Talk to Curve about the data side of your restriction

Book a call and Curve's team will look at what your site sends to Meta, Google and TikTok, and show you the compliant setup that keeps your campaigns optimizing.

Book a call