On this pageJump to a section
Retargeting did not die in January 2025. It got narrower, and it got a lot less forgiving of sloppy work.
If you run paid traffic for a telehealth brand, you already felt it: events you used to send went quiet, audiences shrank, and the old playbook of "show an ad to everyone who started the intake form" started to look like a liability instead of a tactic. In my years on the platform, Meta has rarely been this direct about what it would rather not receive.
Use this as education, not as legal advice. Health privacy and advertising rules depend on your structure, your state and your data, so confirm your approach with qualified counsel.
What did Meta actually restrict?
In November 2024 (I covered the warning in Meta Is Coming for Health Data), Meta updated its guidance and began notifying advertisers that it would restrict certain website categories that use its business tools starting in January 2025.2 Per Marketing Brew, Meta "may restrict the sharing of specific mid- and lower-funnel events," and in some cases campaign optimization could stop working.1
How Meta defines the category
A memo a Meta representative shared with an advertiser described health and wellness data as information "associated with medical conditions, specific health statuses or provider/patient relationship."1 For a telehealth company, the last phrase is the one that matters. A booked consult or a completed intake is, by definition, evidence of a provider and patient relationship.
Why the impact varies
Reporting at the time stressed that effects differ by brand. Some advertisers expected to lose lower-funnel conversion data, while others might keep their purchase pixel, and the appeals process was unclear.2 I would not read any of this as a punishment. I would read it as a signal about where the line sits.
To help prevent advertisers from sharing sensitive information through Meta Business Tools.
Can telehealth brands still retarget on Meta?
Yes. But you need to stop thinking of retargeting as "follow everyone who got close to buying" and start thinking of it as "keep showing useful content to people who have already shown interest in the topic."
Retargeting did not disappear. The sensitive layer did. What remains is still useful if you build it deliberately.
What can you build retargeting on now?
Three layers, from safest to riskiest.
Layer one: content engagement
People who watched your educational videos (the warm-audience logic is in Warm Audiences After Cookie Whiplash), engaged with your Instagram profile or opened a general lead form are interested in a topic, and Meta already holds that engagement on its own platform. You are not sending it a health event from your site.
The caution is in how you use it. Keep the audience names neutral and boring, keep the creative educational, and never write ad copy that implies you know something about someone's condition. "Still thinking about your weight?" is a bad idea. "Three questions to ask before any weight-management consult" is a useful one.
Layer two: consent-based first-party lists
A newsletter list of people who opted in to receive educational content can be a legitimate audience, provided they agreed to the use clearly and the list says nothing about a condition, a treatment or a patient relationship. Meta requires customer file data to be uploaded in hashed form, and it says the advertiser, as the owner of the data, is responsible for creating and managing it.6
Keep the list generic: "Newsletter subscribers" is a list. "People who started a weight-loss intake" is a health inference with a name on it.
Layer three: what to leave out
Leave out patient lists. Leave out lists segmented by condition, medication or treatment status. Leave out anything built from intake answers.
This is not paranoia. It is exactly the fact pattern regulators have already acted on.
Why can a customer list be a disclosure?
Because uploading it hands the platform information about the people on it, even if you never meant to. The pixel version of the same risk is in HIPAA, Tracking Pixels and the Court Ruling Clinics Misread.
In 2023, the FTC announced an action against GoodRx. The agency alleged the company shared users' prescription and health condition information with advertising companies and platforms, including Facebook, despite promising not to. It said GoodRx uploaded lists of users who bought certain medications to Facebook in August 2019 and used them to target ads. The proposed order included a $1.5 million civil penalty and a permanent ban on disclosing health information to applicable third parties for advertising.3
A month later came BetterHelp. The FTC said the company shared email addresses, IP addresses and health questionnaire answers with Facebook, Snapchat, Criteo and Pinterest for advertising, including giving Facebook email addresses along with the fact that those people had been in therapy so it could find similar users. The order required $7.8 million for consumer refunds and barred BetterHelp from disclosing health data for advertising.4
Neither case is about Meta's current rules. They are about the same idea: the list is the data. If your list implies health information, the upload is the problem.
How do you measure results without sending sensitive outcomes?
Measure in your own system first. Your CRM, your scheduling tool and your intake software already know which lead source produced which consult, without any of that data leaving your control.
Meta publishes an integration that sends CRM funnel stages back to Meta for lead ads, and it has its own requirements for volume and data quality.5 Whether a given stage is appropriate to send for a health business is a question for your counsel and your Events Manager category, not for a blog post. If you cannot answer it with confidence, do not send it.
What you can always do is compare lead sources inside your own reports: cost per lead, lead to consult rate, consult to patient rate. That is a decision-making system that does not depend on a platform's permission.
A 30 day plan for rebuilding retargeting
- Audit your data sources. In Events Manager, look at the category Meta assigns to each pixel and dataset. If one looks wrong, request a review, as Marketing Brew's reporting advised.1
- List every audience you use. Delete or archive any named after a condition, a treatment or a patient status.
- Rebuild with engagement. Create audiences from video viewers and profile engagers, named neutrally.
- Create educational creative. Build three or four pieces of content that answer common pre-consult questions without implying anything about the viewer.
- Clean your lists. Keep only consent-based, generic lists. Remove anything tied to patients.
- Move measurement in-house. Report lead source to consult to patient from your own CRM every week.
What is the practical takeaway?
Retargeting in telehealth is now a content game. You win by being the useful, credible source people come back to, not by stalking the people who nearly booked.
That is better for patients and, in my experience, better for the brand. It is also much easier to defend if anyone ever asks how your audiences were built. I build funnels that keep measurement in-house, which you can read about on my telehealth page.
Keep building.Ekai
Questions people ask
Can telehealth companies still retarget on Meta?
Yes, but the toolkit is narrower. Meta has said it may restrict the sharing of mid- and lower-funnel events for health and wellness advertisers, so retargeting now leans on content engagement, upper-funnel signals and carefully handled first-party lists.
What counts as health and wellness data for Meta?
According to a memo reported by Marketing Brew, it includes information associated with medical conditions, specific health statuses or the provider and patient relationship.
Is uploading a patient list to Meta safe?
Treat it as high risk. The FTC's GoodRx and BetterHelp cases involved sharing health-related information and lists with advertising platforms. Talk to a healthcare privacy attorney before uploading anything tied to patients or conditions.
What should I do if Meta restricts my data source?
Review the category assigned to each data source in Events Manager and request a review if one looks wrong. Marketing Brew's reporting recommended exactly that step.
Is this legal advice?
No. This is educational. Health privacy and advertising rules depend on your structure, your state and your data, so confirm your approach with qualified counsel.
Sources
- 1
- 2
- 3
- 4
- 5
- 6
