On this page
Healthcare advertising is allowed on Google, Meta, TikTok and LinkedIn, but each platform restricts health targeting and some health products, and US law adds limits on claims and on patient data. Google requires certification for some healthcare ads and treats health as a sensitive category for personalized ads, Meta and TikTok set age limits on many health ads, LinkedIn bars misleading health claims, and HIPAA limits what your website may share with any platform. Curve Compliance helps with the data side: it sends conversions to each platform server-side and strips protected health information (PHI) before data reaches an ad platform.
Book a call. Running health ads on more than one platform? Curve Compliance replaces browser ad pixels with one script, sends each platform only a fixed list of fields, and Curve's team reviews what your website sends to Meta, Google and TikTok with you. Setup is done by Curve's team, typically live in about a week. Book a call with Curve.
The rules at a glance
Each row comes from the platform's own policy page, opened November 2, 2026. Your specialty may add rules; follow the links for detail.
| Platform | Certification or authorization | Targeting limits | Claims and creative | Source |
|---|---|---|---|---|
| Google Ads | Required for some healthcare ads, such as telemedicine, online pharmacies and addiction services | Health is a sensitive interest category: no advertiser-curated audiences | Rules on prescription drug terms, unapproved substances and experimental treatments | Healthcare and medicines; Personalized advertising |
| Meta | LegitScript for online pharmacies and telehealth providers promoting prescription drugs | Health, weight loss and cosmetic ads must target adults; health-related Detailed Targeting options were removed | No implying a viewer has a condition; no claims to cure listed incurable diseases | Health and Wellness; Personal Attributes; Drugs |
| TikTok (US) | Medical institutions: certifications may be required; pharmacies need NABP or LegitScript certification | Medical institution ads restricted to audiences 18 and older | Must comply with local laws and regulations | Healthcare and Pharmaceuticals |
| Prior authorization for prescription drugs, pharmacy and telehealth services | No targeting on data concerning health | No unrealistic or misleading health claims | Advertising Policies |
Google Ads: healthcare and medicines, certification, personalized ads
Google says: “Some types of healthcare-related content can't be advertised at all, while others can only be advertised in certain locations by advertisers who have applied and been approved to advertise those products or services using Google Ads.” Certified ads in allowed locations are labeled “Eligible (limited)” and run only there. In the United States, “Google allows telemedicine providers if they're accredited by LegitScript's Healthcare Merchant Certification Program,” and for recovery-oriented addiction services “you must be certified as an addiction services provider by the LegitScript Certification program” (Google). See who needs LegitScript certification.
Targeting is the other half. Google lists Health among its sensitive interest categories and says “Advertisers promoting products and services that fall within sensitive interest categories are unable to use advertiser-curated audiences,” which include Customer Match and your data segments, “previously called remarketing.” Predefined Google audiences stay open: “Because predefined Google audiences are expressly configured without sensitive user signals, all advertisers are allowed to use them, even if they promote sensitive interest categories” (Google). For fixes, see healthcare and medicines disapprovals and the personalized advertising policy for health audiences.
Meta: health and wellness standards
Meta's Health and Wellness standard says: “Ads promoting or marketing dietary, health, or weight loss or weight gain products and services must be targeted to people at least 18 years or older” (Meta). Its Personal Attributes standard says ads can't “Imply knowledge of Medical information of a user or user's family.” Meta's own examples: “New diabetes treatment available” is fine, and “Depression getting you down? Get help now.” is not (Meta). For prescription drugs, “Meta requires online pharmacies and telehealth providers to be actively certified with LegitScript” (Meta).
Meta also removed Detailed Targeting options tied to health causes starting January 19, 2022, with examples such as “Lung cancer awareness” and “Chemotherapy” (Meta). Clause-by-clause detail, including what works in Facebook ads for healthcare, is in Facebook healthcare ad policies, clause by clause.
TikTok: healthcare and pharmaceuticals
TikTok says “Over-the-counter (OTC) medicines, medical institutions, and pharmacies may be allowed if the applicable Market-specific requirements are met.” For medical institutions in the United States, its requirements are to “Comply with local laws and regulations,” that “Certifications from appropriate local regional regulating authorities may be required,” and to “Restrict the ads to audiences aged 18 years or older.” Pharmacies must “Provide proof of certification by a third-party licensing organization, such as the National Association of Boards of Pharmacy (NABP) or LegitScript, or regional equivalent” (TikTok). If TikTok flags data from your site, see TikTok's prohibited data sharing notice and what the TikTok Pixel collects.
LinkedIn: health claims and sensitive data
LinkedIn's policy says: “Ads promoting unrealistic or misleading claims about health improvements, including those related to diet and weight loss, are prohibited.” It adds that “Ads promoting pharmacy and telehealth services are restricted and require prior authorization,” and that ads must not target based on sensitive data, including “data concerning health (including medical information and consumer health data)” (LinkedIn). See LinkedIn's telehealth prior authorization.
FTC: health claims and testimonials
Platform approval does not settle the law. FTC staff guidance says “claims about the health benefits or safety of foods, dietary supplements, drugs, and other health-related products require substantiation in the form of competent and reliable scientific evidence,” and “Advertisers are liable for the misleading use of endorsements, whether in traditional advertising media like TV and print, on the internet, in social media, or in other forms of marketing.” A results-not-typical disclaimer next to a dramatic testimonial, in the FTC's words, does not “cure the deception” (FTC). The FTC's consumer reviews rule “went into effect on October 21, 2024” and bars buying reviews that must express a particular sentiment (FTC). See medical disclaimer examples.
HIPAA: what your tracking may share
Every platform above is fed by your website. HHS says: “For example, disclosures of PHI to tracking technology vendors for marketing purposes, without individuals' HIPAA-compliant authorizations, would constitute impermissible disclosures” (HHS). Meta's Business Tools Terms, effective November 3, 2025, bar data that “includes or is based on, directly or otherwise, health information,” and reach the names of your events and custom audiences too (Meta). None of the four platforms signs a BAA, per the BAA Directory (Meta; Google Ads; TikTok; LinkedIn Ads), so what reaches them has to be free of PHI. Which rules apply to your campaigns depends on your setup, so talk to your counsel.
Not sure what your site sends today? Book a call and Curve's team will walk through it with you, platform by platform.
How Curve Compliance helps
Curve Compliance takes care of the tracking side of healthcare advertising. Curve replaces browser ad pixels with one script and sends conversions server-side from Curve's servers to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn. Each platform receives only a fixed list of fields, events can use neutral names, and contact identifiers are off by default on Meta, Google Ads and TikTok. Curve checks every event for PHI-like patterns and strips PHI before data reaches an ad platform, and Event Logs show what Curve sent to each platform and what the platform accepted.
When a platform flags your account or data, Curve's team reviews what your website sends to Meta, Google and TikTok with you and shows what's likely triggering the flag. Curve keeps ad attribution when a patient leaves to book in IntakeQ, Calendly, Acuity, Jane App and other schedulers. Curve is SOC 2 Type II and signs a BAA on every plan (Directory entry). See the ad account rescue guides for platform fixes.
Sources, checked November 2, 2026: Google Ads, Healthcare and medicines; Google Ads, Personalized advertising; Google Ads, Health in personalized advertising; Meta, Health and Wellness; Meta, Privacy Violations and Personal Attributes; Meta, Drugs and Pharmaceuticals; Meta, Removing Certain Ad Targeting Options; Meta Business Tools Terms; TikTok, Healthcare and Pharmaceuticals; LinkedIn Advertising Policies; FTC, Health Products Compliance Guidance; FTC, Consumer Reviews and Testimonials Rule Q&A; HHS, Use of Online Tracking Technologies; Google, AI features and your website.
Frequently Asked Questions
What are the rules for healthcare advertising?
Each ad platform restricts health targeting and some health products, with certification for some services on Google and age limits on Meta and TikTok. The FTC requires substantiated health claims, and HIPAA limits what your website may share with any platform.
Can healthcare companies advertise on Facebook?
Yes. Health ads must target people at least 18 years or older (Meta), may not imply the viewer has a condition (Meta), and telehealth providers promoting prescription drugs need LegitScript certification (Meta). See Facebook healthcare ad policies.
Can healthcare ads use remarketing?
Not on Google when your ads fall in its Health category. Google says “Content related to Health is a sensitive interest category and includes personal health content like” physical or mental health conditions, treatments for chronic conditions and invasive procedures (Google), and advertisers in sensitive interest categories cannot use advertiser-curated audiences such as your data segments, previously called remarketing (Google). Predefined Google audiences remain available.
Do health ads need Google certification?
Some do. Google requires certification for telemedicine providers, online pharmacies and addiction services, among others, and certified ads run as Eligible (limited) in allowed locations (Google). Check Google's list against the services you advertise.
Do ad platforms sign a BAA?
Meta, Google Ads, TikTok and LinkedIn do not, per the BAA Directory (Meta; Google Ads; TikTok; LinkedIn Ads), so what reaches them has to be free of PHI. See which ad platforms sign a BAA.
Can clinics advertise on TikTok?
In the United States, TikTok says medical institutions may be allowed if they comply with local laws, hold any required certifications and restrict ads to audiences aged 18 years or older (TikTok).
What are the key trends in healthcare marketing for 2026?
Three stand out in primary sources: Meta's Business Tools Terms, effective November 3, 2025, cover the names of your events and custom audiences (Meta); Google's AI Overviews and AI Mode answer some searches with links to supporting websites (Google); and the FTC's reviews rule is in force (FTC). See healthcare marketing trends for 2027 and healthcare digital marketing.
Talk to Curve Compliance
Book a call. Want every platform to learn from booked patients without receiving PHI? Curve Compliance sends conversions server-side with a fixed list of fields, strips PHI before data reaches an ad platform and signs a BAA on every plan. Curve's team does the setup, typically live in about a week. Book a call with Curve.