Google Ads Healthcare and Medicines Policy Explained for Wellness Brands

Overview

It is the largest structural constraint on paid search for med spas, longevity clinics, telehealth platforms, supplement brands, device manufacturers, and biohacking studios. It decides what you can say, who you can say it to, where, and whether somebody independent has to vouch for you first. This is not a content filter you can write around. It is a gate, and the gate has a shape.

This guide maps that shape. What the policy governs. Who has to be certified. What LegitScript certification is. Where the line between restricted and prohibited falls, how country targeting narrows things further, what personalized advertising restrictions take off the table, and how to build an account that survives review. One caveat first. Google revises these policies regularly, sometimes quietly, and requirements differ by country. Treat this as orientation, not legal advice, and verify any rule your spend depends on.

The certification requirement: who has to be certified before advertising

Some healthcare business types cannot run ads on Google until they finish a certification process with Google, and in most cases obtain LegitScript certification before that. The requirement is category-based, not spend-based. No campaign structure gets around it.

Certification generally applies to online pharmacies, pharmacy affiliates, telemedicine providers that facilitate prescriptions or prescriber consultations, addiction treatment services, and certain clinical categories depending on the country. If your business connects a patient to a prescriber, assume you are inside it.

Outside it sit businesses that usually need no certification: a med spa advertising services it performs onsite, a longevity clinic advertising diagnostics and consultations, a manufacturer selling a cleared consumer device, a supplement brand selling non-prohibited ingredients. The policy still governs all of them in full. They are simply not gated before they can start.

What decides your category is what the offer functionally does, never what your marketing calls it. Sell a membership that routes members to a prescriber consultation and you are a telehealth provider as far as policy is concerned. Settle this before anything else, because it sets your timeline.

Restricted versus prohibited: the line that decides your strategy

Google divides healthcare advertising into what is never allowed and what is conditionally allowed. Confusing the two is the most expensive mistake in this category, because founders lose months chasing approval for something that has no approval path.

Prohibited means no certification, no appeal, and no account structure that makes it eligible. It typically covers unapproved pharmaceuticals and supplements, prescription medicine sold without a prescription, controlled substances, products claiming to treat serious conditions without approval, unsubstantiated health claims, and speculative treatments regulators have not cleared. Peptides as a category sit in a genuinely difficult position, where eligibility turns on the compound, its regulatory status, and the country. Assume nothing.

Restricted means allowed with conditions attached: certification, country limits, content limits, or all three at once. Telehealth, pharmacy, addiction services, and most prescription-adjacent categories live here. So do large parts of aesthetics and longevity, where the service itself is fine and the claims wrapped around it are what get evaluated.

Sort your product and service list into those two buckets before anyone writes an ad. A prohibited line item is not a Google Ads problem. It is a channel selection problem, and the answer is to build demand for it somewhere else.

Personalized advertising restrictions, and what they remove from your toolkit

Sitting apart from Healthcare and Medicines is Google's personalized advertising policy, which restricts targeting on sensitive categories. Health is among the most tightly controlled, and most media buyers underestimate how much it takes away.

You cannot build audiences that infer a user has a specific health condition, or is being treated for one. You cannot run remarketing in ways that imply knowledge of someone's medical status, or use customer lists the way ecommerce does. Segments built on chronic conditions, mental health, sexual health, and similar categories are unavailable or heavily limited. Ad copy cannot speak to a user as though it knows something private. And rebuilding a sensitive audience by proxy counts as a violation on its own.

What is left is stronger than it sounds. Keyword intent still works, and in healthcare it is the sharpest signal on offer, because somebody typing a treatment name has told you what they want without you inferring a thing. Geography, device, and schedule work. Value-based bidding on first-party data works too, as long as the events you feed back carry no condition-level information. The shift is from audience-led buying to intent-led buying. Teams arriving from paid social feel it as a loss. It usually turns out to be a gain, since intent here converts harder than any inferred audience ever did.

Landing page and destination requirements Google checks

The destination is part of the ad, and in healthcare it gets read harder. Reviewers want a functioning site that names the legal entity behind it, a visible privacy policy and terms of service, disclosure of who delivers the service and under what licensure, contact information a human could actually use, and agreement between the claim in the ad and the content on the page. They are hunting for claims that outrun the evidence, missing disclaimers, and pages collecting health information without saying how it gets handled.

Two problems cause more healthcare disapprovals than weak copy. Destination mismatch, where the ad promotes one service and the page sells something broader. And thin or gated pages that never let a reviewer see what is on offer. If somebody has to fill out a form to see what your business does, you have already lost. Build the page so a stranger with no context can tell inside ten seconds who you are, what you deliver, who delivers it, and where the limits sit.

Building a Google Ads account structure that survives policy review

An account built with policy in mind absorbs a violation. One built without it collapses the moment a violation lands. The difference is containment. Separate by risk, so high-risk services sit in their own campaigns and a disapproval there cannot drag down the campaigns funding the business. Separate by geography, so a country-level issue stays where it started. Separate by destination, with distinct landing pages for distinct offers, so a page-level problem cannot spread.

Keep certification current and documented. Write copy that stays inside what your clearance, your licensure, and your evidence support, and make the promise in the headline identical to the promise on the page. Review disapprovals weekly, because escalation runs on pattern rather than single incidents. Build the compliance layer first and the media plan second. The binding constraint in this category is not creative volume or budget efficiency. It is eligibility, and eligibility gets earned before launch.