Should Med Spas Record Patient Consultations? Legality, HIPAA & Consent, Explained

Should med spas record patient consultations? My short answer is yes. But a blog post needs to be longer than three words, so in this article I’ll get into the full explanation: why recording your consultations is worth doing, how it's legal in every state, how consent with customers actually works, and what HIPAA does and doesn't require.

I lead sales for Siro's newest industries, including medical aesthetics, and I've taken our customers through this exact decision end to end. Every one of them started with the same three questions: is it legal, will patients mind, and what about HIPAA. This post is the answers, in the order that practice owners usually ask them.

Why should medical aesthetics practices record patient consultations?

Medspas should consider recording patient consultations because it is the conversation where a patient decides whether to book. It makes or breaks the deal, and right now everything you know about what happens is what your PCC records into the CRM afterward.

Those notes show the outcomes of their conversation, but not what actually happens in the conversation itself.

The practices getting the most out of recording aren't using it to surveil people. They're using it as data. Siro records the conversation (audio, not video), and everything downstream comes from that: notes and CRM fields filled automatically, follow-ups drafted for the patients who are “thinking about it,” and the ability to drill into what your best consultants do differently.

When our customers talk about the value they get from Siro, the language they use is about drilling into the data, and pulling insights out of conversations they used to lose entirely.

The scale of what's being lost is bigger than most owners realize. The industry runs roughly 10,488 medical spas across the U.S., averaging 245 patient visits a month each. That's over 2.5 million visits a month, and each one traces back to a consultation that produced nothing but a CRM note.

Your consultants win too. They spend the consult looking at the patient instead of typing, and they get their own recordings to learn from, which is where most of the improvement actually comes from.

Is it legal to record patient consultations in a med spa?

Yes. Recording sales conversations is legal in all 50 states, and every state falls into one of three consent categories.

One-party consent states: Your own consent as the recorder is generally enough in person, and most states land here.

All-party consent states: You need the patient's consent too, and it has to happen before the recording starts, not as a heads-up partway through.

Context-dependent states: The rule shifts based on setting or medium, so an in-person consult and a phone or video consult in the same state can fall under different rules.

The guide above breaks down exactly where each state lands, including edge cases like California's added wrinkle around what counts as a “confidential” conversation.

All this is to say, recording isn't the legal risk, but skipping the consent step is.

How do you ask a patient for permission to record?

How you disclose the recording matters more than which legal category you're in. A vague ask creates hesitation; a direct one doesn't. From our customers’ experiences, here's the version that works best:

The practices we work with often land on something even simpler:

These explanations call out the value of recording, not just the tool.

If a patient says no, you take notes and move on. Across Siro's customer base, people decline in under 1% of conversations, and in my experience that number holds because the ask is direct.

The strongest setups I've seen put consent in the intake paperwork first, reinforce it with the verbal line at the start of the consult, post visible signage in the consultation room, and let the recording open with a short in-app consent prompt. Four light layers, and nobody's guessing.

Does HIPAA prevent recording aesthetic consultations?

No, HIPAA doesn't govern whether a conversation can be recorded. It governs how protected health information is safeguarded, which in practice means it governs which vendor you can choose.

That's why the platform question comes first. , executes Business Associate Agreements with practices that need them, and is the only platform for coaching in-person client conversations that meets HIPAA requirements. Behind that sits automated redaction of names, phone numbers, and payment details from both transcript and audio, retention and deletion controls, no stored voiceprints, and a public Trust Center.

Will patients be uncomfortable being recorded?

Almost never, and the under-1% decline rate I shared above is pretty strong evidence. Recording reads as accountability to patients: this consultant stands behind what they're telling me.

When discomfort does show up, it's usually not the patient's. A consultant who has never been observed is suddenly coachable, and the first few weeks of that can feel exposing. That's a normal, temporary adjustment, and the teams that handle it best name it upfront and make sure consultants see their own recordings first. The consent ask itself just needs to be direct; a confident ask gets a yes.

What does a practice actually gain from recorded consultations?

This is where the real case for recording lives, and it has nothing to do with compliance. A consultation that used to end at a CRM note becomes data the whole practice can build on, and it compounds across three layers of the same conversation.

Recording consultations reduces admin time after the conversation

Notes, CRM fields, and follow-up drafts happen automatically. For a PCC running back-to-back consults, that's the difference between selling and typing.

It also creates an intelligence layer to better understand patients

You learn why patients don't book: the pricing hesitations, competitor mentions, and objections that never survive into a CRM note. Practices use this to fix offers and scripts, not just people.

Over time, recording helps PCCs improve their skills

Your best consultant does specific things differently, and now those moments are findable and shareable. Consultants review their own conversations and improve between consults, without anyone hovering.

None of these layers work in isolation. The admin layer buys back the consultant's attention, the intelligence layer tells you what to fix in the pitch itself, and the coaching layer turns your best rep's instincts into something teachable. Practices that get real value out of Siro are usually pulling on more than one of these at once.

More on how the medical aesthetics product works for practices specifically is on our industry page.

How should a practice roll out consultation recording, and get the team on board?

Once you know your consent requirements, the harder part is turning that into a habit your team actually follows.

1. Tell your team why, before you tell them how. Recordings get used for admin, insights, and coaching, not surveillance. Make that clear before anything else.
2. Let PCCs see their own recordings first. Before leadership ever reviews a call, the consultant does first. That sequencing is what turns recording into a tool people want, not one they tolerate.
3. Start with a pilot team or location. Work out the kinks with a smaller group before it becomes company-wide policy.
4. Check in early, not just at go-live. Two to three weeks in, ask what's landing and where the script still feels awkward, then adjust.
5. Build it into new-hire onboarding. Once it's standard, new consultants should learn the ask the same way they learn the CRM, not as an add-on months later.

For the full rollout process, our onboarding guide covers getting a team genuinely on board.

Frequently asked questions

Is it legal to record patient consultations at a med spa?

Yes, in every U.S. state. What changes is whose consent you need: some states require only the recorder's consent, others require the patient's too. The full state-by-state breakdown covers each.

How do you ask a patient for consent to record a consultation?

Name the tool and the reason in one sentence: “Do you mind if I use my AI notetaker to capture our conversation so I ensure I follow up with everything we review today?” If they decline, take notes instead and move on.

Does HIPAA allow recording aesthetic consultations?

Yes. HIPAA governs how protected health information is safeguarded, which makes it a vendor-selection question: choose a platform built to the HIPAA Security Rule, with a Business Associate Agreement if your practice needs one.

Will patients be uncomfortable being recorded?

Rarely. Patients decline in under 1% of conversations across Siro's customer base, and pushback usually traces to an unclear ask rather than the recording itself.

What does Siro do with patient data?

The practice stays the data controller. Siro doesn't sell personal information, doesn't store voiceprints or biometric data, and automatically redacts personal details like names and phone numbers from transcript and audio.

About the author

Chad Simons is a Sales Manager at Siro, where he leads sales for Siro's newest industries, including medical aesthetics. He worked his way from account executive to enterprise account executive to leading the team, after cutting his teeth in enterprise SaaS sales.