A before-and-after photo shows the result. A video testimonial shows the decision: someone who was nervous about the same treatment, sitting in the same chair, saying it turned out fine. Filming one is straightforward. Publishing it is where med spas get stuck, because two federal rules govern what can go on the page. The HIPAA Privacy Rule requires a signed authorization before you use an identifiable patient's image or story to promote your practice (45 CFR 164.508). The FTC's Endorsement Guides require you to disclose anything of value you gave in exchange for the testimonial. Here is the paperwork to collect, the specs that keep the video from slowing your site down, and where it actually books patients.
When video earns its place
A video testimonial costs more than a written review and does a narrower job. It pays off on treatments where hesitation is the obstacle. For a $60 express facial, a Google review does the same work for free.
- First-time injectables. A patient's own face, moving and talking, answers the "will I look overdone?" objection better than any copy you can write.
- Anything with downtime. Microneedling, resurfacing lasers, deeper peels. Let the patient describe day two and day seven honestly.
- Memberships and packages. Someone committing for twelve months wants to hear from a person who already did.
- A specific provider. For a solo injector or a newly hired NP, the question is who is holding the needle. A bio cannot answer that; thirty seconds of their patient can.
- Skip it for low-cost, low-anxiety services. Written reviews carry those.
The authorization comes before the camera
Two questions decide your paperwork. First: are you a HIPAA covered entity? A practice is covered if it transmits health information electronically for a HIPAA standard transaction, which in practice usually means billing insurance. A cash-pay aesthetics clinic often sits outside that definition while the supervising physician's medical practice sits squarely inside it. Second: does the video identify the patient? A face and a first name does.
If HIPAA applies, using that video to promote your services counts as marketing, and marketing that uses protected health information requires a written authorization signed before publication (45 CFR 164.508). The form names what is being used, who may use it, the purpose, an expiration date, and the patient's right to revoke.
If HIPAA does not reach your clinic, you are still bound by state privacy law, your state medical or nursing board's advertising rules, and ordinary consent to use a person's likeness commercially. Boards tend to restrict what a licensee may claim in advertising, and testimonials are where those rules usually bite. The same policy that governs your before-and-after photos applies here, with one added wrinkle: a voice and a face cannot be de-identified the way a cropped photo can.
Four things belong in the file before anything goes live:
- The signed authorization or release, naming the specific video and every channel it will run on. A website-only release does not cover a boosted Instagram ad.
- The filming date and the treatment shown, stored with the video file, not in someone's memory.
- A revocation path you can execute: who takes the video down, from which pages and ad accounts, and how quickly.
- A written note of anything you gave the patient in exchange. That one feeds straight into the next section.
What the FTC makes you disclose
The FTC's Endorsement Guides (16 CFR Part 255) govern testimonials in advertising, and the agency revised them in 2023. Three rules do most of the work for a med spa.
- Disclose material connections. Free treatment, a discount, account credit, a gift card, or a fee paid to the patient all count. The disclosure goes next to the video in plain language, not in a footer and not behind a hover.
- Do not imply an atypical result is typical. The FTC removed the old "results not typical" escape hatch years ago, so a disclaimer does not rescue an ad that conveys a result most patients will not get. If your best-case patient is on camera, state the usual range.
- A testimonial cannot make a claim you could not make yourself. If you cannot substantiate "it cleared my melasma permanently," a patient saying it into your camera does not make it publishable.
Since October 2024 the FTC has also had a dedicated rule on fake and misleading reviews (16 CFR Part 465). It reaches AI-generated testimonials, videos from people who never received the treatment, and reviews from employees or their relatives presented as independent. The rule carries civil penalties. Hiring an actor to describe a treatment they never had is the exact scenario it names.
“Every rule here is cheaper to follow before the camera is on. A release signed at the appointment costs nothing. The same conversation six months later, after the video is embedded on three pages and boosted twice, costs a lawyer's afternoon.”
— Codura Solutions
Length, captions, and page speed
A testimonial is the heaviest asset most med spa websites ever add. The usual mistake is dropping a 40 MB MP4 into the media library and autoplaying it in the hero. Google's Core Web Vitals treat 2.5 seconds as the threshold for a good Largest Contentful Paint, and an autoplaying hero video can become the element that clock is measuring, on a phone, on an average mobile connection. That is the same budget the rest of your page speed work is trying to protect.
- 30 to 90 seconds. Past ninety, ask one question instead of four.
- Click to play, with a poster image (a still of the patient's face). It loads as an image, and the video downloads only if someone wants it.
- Host it on something built for video. YouTube, Vimeo, Cloudflare Stream, and Mux all serve adaptive streams. Embed with a facade so the player's scripts load on click.
- Caption everything. WCAG 2.1 requires captions for prerecorded video at Level A (success criterion 1.2.2), which is the standard most website accessibility claims reference. Captions also make the video usable for the visitor scrolling with sound off.
- Add VideoObject structured data. It tells Google what the video is, and a testimonial is one of the few genuinely video-shaped things a med spa site has to declare.
Where the video belongs
Most med spas put every testimonial on the homepage and stop there. The video does more work sitting next to the decision it answers.
- On the treatment page, below the pricing and above the booking button. A nervous first-time filler patient is reading your filler page, not your homepage.
- On the provider bio, when the question is who performs the treatment. It carries more weight than another line of credentials.
- On the consultation or booking page, as the last thing someone sees before the form. One strong video, not a carousel of six.
- In follow-up email or SMS to a lead who went quiet. This is where a testimonial you already paid for earns its cost twice.
Two or three well-placed videos beat a dozen sitting in a gallery nobody opens. If you already run a before-and-after gallery, the video belongs beside the result it explains, not in a separate tab.
How to actually get them filmed
The camera is not the hard part. Asking at the right moment, with the paperwork already in the room, is.
- Ask at the follow-up visit, not the treatment. A patient who loves the result at week three is a better subject than one who was injected an hour ago.
- Keep the release on the iPad in the room. The gap between "yes, happily" and a signed form is where most testimonials quietly die.
- Ask four questions and cut to one answer: what were you worried about, what was the appointment like, what changed, and who would you send in.
- Film on the phone you already own, in the treatment room, facing a window. A well-lit phone video of a real patient reads as more credible than a color-graded studio piece.
- Pay for an editor rather than a crew. Pulling ninety usable seconds out of twenty minutes of footage is the part worth outsourcing.
Budget in three tiers. Your own phone plus a freelance editor comes to a couple of hundred dollars per finished video. A local videographer for a half day, filming three or four patients back to back, runs into four figures but lowers the per-video cost. A produced brand film with a crew and a script is a different purchase, and it tends to look like an ad, which defeats the point.
If you already have testimonial videos and they are buried on a page nobody visits, that is a placement problem, and your analytics will show it long before the booking calendar does. We will audit your current site for free and send back the three fixes that matter most, no call required: grab a free audit. If the video needs a page built around it that loads fast and books patients, that is what we build.