The 2026 Medspa Safety Checklist — 10 Questions to Ask Before You Book Protect your skin, hormones, and confidence before stepping inside any medspa across Florida, Texas, Arizona, or Georgia

Introduction The Sun Sentinel’s "Med Spas Unmasked" investigation followed a Florida patient whose facial laser ended with second-degree burns because the named physician never appeared, the crash cart sat empty, and junior staff improvised after a fire alarm triggered. That case is not an outlier. Across FL, TX, AZ, and GA, medspas are opening faster than regulators can inspect them, so hybrid storefronts slip between salon rules and medical-board oversight even when they perform injections, lasers, and metabolic therapies.

Social media glamorizes lunchtime facelifts, peptide stacks, and bargain GLP-1 programs, but state boards keep reminding consumers that credentials matter more than reels. The number of short-course “certification” programs has grown more than 400% since 2019, meaning a newcomer can hang a weekend certificate beside a real diploma and most patients can’t tell the difference. Indiana answered that trend with SB 282 in early 2026, requiring onsite physician availability, documented protocols, and stocked emergency supplies; similar bills in Florida, Arizona, and Georgia are still winding through committees, and Texas regulators have hinted at rulemaking but haven’t posted final language. Until those guardrails are universal, the safest path is to interrogate medspas yourself.

The ten questions below, sorted into red-flag and green-flag indicators, are your 2026 playbook. They reference active regulator guidance, highlight peptide and GLP-1 oversight gaps, and point to the exact documentation you should insist on before sharing your health history or credit card.

Red Flags: Questions 1–6 Ask these six questions first. If a clinic dodges, hedges, or shrugs, you’ve likely found the same risk markers that regulators cite after injuries.

Question 1 — Who is your medical director, and when are they physically onsite? - Ask for: Full name, specialty, state license number, and weekly onsite schedule posted in the lobby or website. - Why it matters: Florida, Texas, Arizona, and Georgia all require physician oversight for medical procedures, yet the Sun Sentinel story showed how “paper” directors disappear when complications strike. If staff can’t immediately produce documentation or says the doctor “checks in virtually,” that mirrors the exact pattern regulators called dangerous.

Question 2 — Are the injectors and laser specialists licensed clinicians or only “certified”? - Ask for: RN, NP, PA, or MD licenses plus years of aesthetic experience, and look them up on state board databases while you’re standing there. - Red flag: A response focused on influencer mentorships or weekend-course certificates. With the weekend certificate market up 400% since 2019, underqualified injectors can legally operate unless patients double-check their licenses. Regulators in FL and GA report that most injury complaints involve staff whose only credentials are private certificates.

Question 3 — What labs and medical history do you require before peptides, hormones, or GLP-1 programs? - Ask for: Baseline labs (CMP, CBC, A1C, thyroid, hormone panel), medication reviews, and vitals before each prescription refill. - Why it matters: Peptide and GLP-1 oversight gaps persist. The FDA has warned about compounded semaglutide copycats, and state medical boards in Texas and Florida issued 2025 alerts stating that protocols must include labs. Any medspa promising “no labs, no problem” is treating a medical therapy like a spa add-on — and placing you at risk for thyroid, kidney, or gallbladder complications.

Question 4 — Which 503A or 503B pharmacy supplies your compounded medications, and can I see the lot numbers? - Ask for: Pharmacy name, state registration, pharmacist-in-charge contact, and current lot numbers with beyond-use dates. - Red flag: Vague answers such as “our partner compounder” or labels that list only a PO box. Because GLP-1 and peptide APIs are widely sourced overseas, regulators recommend verifying that pharmacies fall under U.S. 503A (patient-specific) or 503B (outsourcing) rules. If the clinic can’t hand you paperwork, assume the supply chain is murky.

Question 5 — What is your emergency response plan if something goes wrong mid-treatment? - Ask for: Location of crash cart, AED, oxygen, epinephrine, and documented escalation steps when the physician isn’t onsite. - Why it matters: Indiana SB 282 mandates these plans, and while FL/TX/AZ/GA haven’t adopted identical statutes, their boards routinely cite missing emergency prep after adverse events. Medspas without a written plan often improvise during anaphylaxis, lidocaine toxicity, or vasovagal episodes — exactly when seconds count.

Question 6 — How do you document informed consent, pre-care, and aftercare instructions? - Ask for: Copies of consent forms, minimum review times, and written aftercare checklists for every procedure. - Red flag: Being rushed through a tablet signature with no time to read, or staff dismissing aftercare as “just hydrate.” According to the “Med Spas Unmasked” report and multiple state enforcement orders, poor documentation is the most common citation preceding patient injuries.

Green Flags: Questions 7–10 Once a clinic clears the red-flag baseline, look for proof of mature systems. These four questions reveal whether you’re dealing with calm professionals or marketing hype.

Question 7 — How are you preparing for SB 282–style rules in our state? - What to hear: The clinic tracks legislation in FL, TX, AZ, and GA, already requires onsite or immediately available physicians for lasers and injectables, and runs quarterly drills that mirror Indiana’s standards (emergency meds, adverse-event logs, rapid physician contact). - Green flag: Clinics that voluntarily meet the strictest state rules usually have nothing to hide; they’re building muscle memory before regulators force the issue.

Question 8 — What third-party accreditations or audits have you completed? - Ask for: AAAHC, Joint Commission, or specialty group accreditations; malpractice insurer audits; or GlowRoute verification badges. - Green flag: External reviews cost time and money, so clinics pursue them only when leadership values quality systems. Florida medspas that shared accreditation certificates with the Department of Health saw faster inspections in 2025, according to agency briefings.

Question 9 — Can you show me the maintenance log for your lasers, RF microneedling devices, or IPL systems? - What to hear: Serial numbers, calibration dates, and manufacturer-certified technician visits stored in a binder or digital portal you can view. - Green flag: Arizona’s radiation control office says mis-calibrated lasers are a top complaint, and Georgia’s Department of Public Health is reviewing similar data. Clinics that proudly flip open their maintenance logs demonstrate engineering rigor, not just marketing polish.

Question 10 — What do your complication stats look like, and how do you support patients when something goes wrong? - Ask for: Annual complication counts (including minor events), malpractice coverage, and referral agreements with dermatologists or plastic surgeons. - Green flag: Transparent numbers framed with context, such as “Out of 1,100 filler syringes last year, we treated one vascular occlusion within 20 minutes and covered all follow-up visits.” Malpractice carriers serving Texas and Florida report that clinics with written complication logs have faster claim resolution and fewer lawsuits.

GlowRoute Angle Reading legislation, checking pharmacy licenses, and decoding laser maintenance logs takes time you may not have. GlowRoute was created so consumers could skip detective work without surrendering safety. Every clinic on GlowRoute — whether in Miami, Dallas, Scottsdale, or Atlanta — has already answered all ten questions above with documents on file. We verify physician licenses quarterly, confirm that injectors hold active RN/NP/PA/MD credentials (not just weekend certificates), and require proof of 503A/503B pharmacy partnerships. Our reviewers inspect informed-consent packets, lab requirements for peptides and GLP-1s, emergency plans, audit certificates, device maintenance logs, and complication statistics.

When Indiana SB 282 passed, GlowRoute updated its scoring rubric within two weeks and started benchmarking Florida, Arizona, Georgia, and Texas clinics against those stricter requirements. If those states finalize similar rules, GlowRoute clinics are already compliant — because we refuse to list providers who treat medicine like a marketing plan.

What This Means for You Medspa procedures may look like beauty services on Instagram, but they are medical treatments that can alter your skin barrier, immune response, and metabolic health. Asking the ten questions above helps you separate calm professionals from risky storefronts. Red flags tend to cluster: the same clinic that can’t name its medical director often skips labs, buys peptides from unknown pharmacies, and rushes informed consent — the very pattern highlighted in "Med Spas Unmasked." Green flags cluster too: when a clinic eagerly shows maintenance logs, tracks SB 282 legislation, and quotes complication stats, you’re dealing with people who treat aesthetics like medicine.

You can absolutely run this checklist yourself. Copy the questions into your Notes app, ask them during every consultation, and leave if the answers feel slippery. Or, if you’d rather spend that energy planning your results instead of policing bureaucracy, GlowRoute has already done the verification for you.

CTA Skip the checklist — every clinic on GlowRoute is already verified. Find your clinic → glowroute.io