Industry · July 26, 2026

Who Is Actually Injecting You: Medical Spa Supervision and the Doctor You Never Meet

Almost every state allows a physician to delegate cosmetic injections to someone else, and almost no patient is told what that delegation actually looks like in the room they are sitting in. The medical director whose license makes the appointment legal may be off site, may cover several locations, and in some business structures may have no operational involvement at all. Here is how supervision and delegation rules actually work, why the counterfeit botulinum toxin cases of 2024 traced back to exactly this gap, and the specific questions that reveal whether a practice is medically run or merely medically branded.

By The Editorial Desk

8 min read

Editorial photograph

The question of who is actually injecting you is the one patients ask least and should ask first. Most people booking a cosmetic injection at a medical spa assume that the arrangement is roughly what it looks like: a medical setting, a medical product, a medical professional, and a physician somewhere in the background who is genuinely responsible for what happens. Two of those four are reliably true. The other two vary enormously, they vary by state, and they vary in ways that are invisible from the waiting room and absent from the price list.

This is not an argument that nurse injectors and physician assistants should not be injecting. Many of the most skilled injectors in aesthetic medicine are not physicians, and volume in a specific procedure predicts competence better than a specific degree does. It is an argument that the legal structure behind the appointment is a real variable in your outcome, that patients are given almost no help in reading it, and that the failures which make the news are almost always failures of that structure rather than failures of technique.

Delegation is the legal default, not the exception

The short answer: injecting botulinum toxin and dermal filler is the practice of medicine in every state, which means it must be performed by a physician or delegated by one, and the entire question is what that delegation is required to include.

The rules are set state by state, which is why national generalizations fail immediately. The variables that differ between jurisdictions are specific and consequential: whether a physician, nurse practitioner, or physician assistant must personally perform an examination before treatment, and whether that examination can be done by video or must be in person. Whether the delegating physician must be physically on site, reachable by phone, or merely available within some defined period. How many locations or how many delegates a single physician may supervise. Which professions may inject at all, and whether registered nurses, licensed practical nurses, aestheticians, or medical assistants fall inside or outside that line. Whether laser and energy device treatments follow the same delegation rules as injectables, which in many states they do not.

The American Med Spa Association publishes a state-by-state legal survey precisely because these answers are not intuitive and change frequently. The practical consequence for a patient is that the same treatment, performed by a person with the same credential, can be entirely compliant in one state and a licensing violation across a border. Nothing in the appointment tells you which situation you are in.

One requirement deserves particular attention because it is both widespread and widely skipped: the good faith examination. Most states require that a licensed practitioner authorized to diagnose, typically a physician, nurse practitioner, or physician assistant, evaluate the patient and establish a treatment plan before a delegated injection occurs. In practice this often collapses into an intake form and a signature. If nobody with prescriptive authority evaluated you, the prescription-only drug you are about to receive was not really prescribed to you.

"

The failures that reach the news are rarely failures of injection technique. They are failures of the structure behind the appointment, and that structure is invisible from the waiting room.

"

The 2024 botulinum toxin cases were a supervision story, not a product story

The short answer: in the spring of 2024 the Centers for Disease Control and Prevention issued a health advisory after patients across roughly two dozen states developed botulism-like illness following cosmetic injections, and the common thread was counterfeit or mislabeled product administered by unlicensed or improperly supervised people in non-medical settings.

The clinical picture was serious. Patients presented with blurred vision, drooping eyelids, slurred speech, difficulty swallowing, and generalized weakness. A substantial share required hospitalization, and some were treated with botulinum antitoxin, a therapy stocked for foodborne botulism rather than for a cosmetic appointment gone wrong. The Food and Drug Administration subsequently warned about counterfeit units of an FDA-approved product circulating through unlicensed distributors, and about products sourced from outside the United States that are not approved for use here at all.

The instructive part is the mechanism. A licensed physician purchasing through an authorized distributor has a supply chain with lot tracking and a manufacturer relationship. An unlicensed operator buying from an online reseller has neither, and the discount is the entire reason the transaction exists. When the person injecting does not hold the prescriptive authority that makes the purchase legitimate, the acquisition path is already irregular before the needle is opened. Counterfeit product was the visible harm. The supervision gap was the opening.

There is a smaller, more common version of this that never makes the news: legitimate product, reconstituted or stored incorrectly, or overdiluted to stretch a vial across more patients. The patient reads the weak result as their own resistance to the drug. It was arithmetic.

A medical director is a title. Ask what the schedule looks like.

The short answer: in most states only a licensed physician may own a medical practice, so many medical spas are structured with a physician owner of record and a separate management company that runs the business, and the depth of that physician's actual involvement ranges from daily clinical leadership to a signature on a contract.

The doctrine behind this is called the corporate practice of medicine, and its intent is sound. It exists to keep clinical decisions with clinicians rather than with investors. The structure it produced in aesthetics is the management services organization, in which a non-physician company handles marketing, staffing, leases, and equipment while a physician holds the clinical entity. Plenty of well-run practices use this structure honorably. It also permits an arrangement in which a physician lends a license to several locations they rarely visit, for a fee, while operational decisions including which products to buy and how much to dilute them sit with people who do not hold a medical license.

Patients cannot audit any of this, and they should not have to. What they can do is ask two questions that are difficult to answer vaguely. Is the medical director here today, and how often are they here. And who trained the person injecting, in what, and how recently. Injector training in this industry runs from multi-year clinical fellowship experience down to a weekend certificate course, and the certificate on the wall does not distinguish between them. The number of treatments performed per month does.

Facility readiness is a separate question from injector skill

The short answer: the complications that matter in an injectable practice are time-sensitive, so the meaningful safety question is not whether the injector is good but whether the room is equipped and the protocol is written before anything goes wrong.

For filler, the non-negotiable item is hyaluronidase stocked on site in adequate quantity, along with a practitioner who has actually used it under pressure rather than only read about it. Vascular compromise from filler is uncommon and it is an emergency measured in hours, which makes on-site availability the entire point. A practice that has to order the reversal agent has already lost the window. For botulinum toxin, the relevant readiness is different and quieter: correct storage, correct reconstitution, documented lot numbers, and an honest disclosure protocol if a patient later reports a symptom pattern that does not fit ordinary spread.

Beyond product, ask what happens when a patient has a vasovagal episode, an allergic reaction, or a cardiac event during an appointment. The answers should be immediate: someone current in basic life support is always present, emergency medications and oxygen are stocked, and there is a named transfer arrangement with a nearby hospital. A practice performing injections in a retail setting with no medical response capacity is relying on nothing going wrong, which is a strategy rather than a plan.

What actually predicts a good injector

The short answer: procedure-specific volume, a conservative dosing philosophy, willingness to decline a request, and a documented complication history are better predictors of a good result than the letters after a practitioner's name.

The credential sets a floor. It does not describe the ceiling, and patients over-index on it because it is the only variable they can see. The signals that correlate better with outcomes are less visible but askable. How many of this specific procedure do you perform monthly, in this specific anatomic area. Have you managed a vascular occlusion, and what happened. What percentage of consultations do you turn away, and for what reasons. An injector who has never declined a request is either extraordinarily fortunate in their patient population or is selling rather than treating.

Two more signals are worth weight. The first is whether the practice sells packages of pre-paid syringes, which converts a clinical decision about how much product a face needs into a balance the patient has already paid for and wants to use. The second is whether follow-up is scheduled by default rather than offered on request. Practices that see their own results at two weeks develop calibrated judgment. Practices that never see the patient again develop confidence instead, which is a different thing and looks identical from the outside.

The honest summary

The medical spa model is not the problem, and non-physician injectors are not the problem. The problem is that patients are asked to evaluate a medical service using retail signals, in a category where the regulatory structure is genuinely complex, varies by state, and is deliberately not surfaced during booking. The result is that the questions which would actually separate a well-run practice from a poorly run one feel rude to ask, so almost nobody asks them.

They are not rude. A practice that is medically run finds them ordinary, because staff who work under real supervision answer these questions several times a week. Ask who holds the license, whether that person examined you, where the product came from, what is stocked in the room for the emergency that is unlikely tonight, and how many of this exact treatment the person holding the syringe performed last month. If those five answers arrive quickly and specifically, the structure behind your appointment is sound. If they arrive as reassurance about how experienced everyone is, you have learned that the reassurance is what the practice has instead of an answer.