The United States regulates medical advertising very differently from the Gulf. There is no central body you submit your ads to for pre-approval. Instead, a web of agencies and laws governs what you can say, and enforcement — when it comes — is serious: Federal Trade Commission actions, HIPAA penalties, state-board discipline, and the civil and criminal exposure of the fraud-and-abuse laws. The freedom to publish without a permit is real; so is the responsibility to get it right.
For an ethical practice, the path is clean. Say true things you can prove, protect patient information, disclose material connections, and never pay for referrals in ways the law restricts. Do that, and the biggest US-specific opportunity opens up: positioning.
At a glance — the framework
- FTC
- Truth-in-advertising: claims must be truthful, non-deceptive and substantiated; endorsements and testimonials must follow the Endorsement Guides.
- HIPAA
- Using patient information, images or testimonials in marketing generally requires the patient's written authorization.
- State medical boards
- License practitioners and set advertising rules that vary by state; false or misleading advertising is prohibited everywhere.
- AKS & Stark Law
- Restrict paying for referrals and certain inducements, especially for Medicare/Medicaid patients.
- FDA
- Governs claims about drugs and medical devices.
No permit — but real accountability
Because nobody pre-clears your advertising, it's easy to assume anything goes. It doesn't. The FTC expects every objective claim to be truthful and substantiated before you publish it, HIPAA governs any use of patient information, and your state board can discipline false or misleading advertising. The absence of a gatekeeper means the responsibility sits entirely with you.
Commonly restricted in the US
- False, misleading or unsubstantiated claims — the FTC requires evidence for objective claims before you publish.
- Testimonials without HIPAA authorization — using a patient's story, photo or review in your marketing without written authorization.
- Testimonials implying atypical results — without clear disclosure that results aren't typical.
- Undisclosed paid endorsements — influencer or staff endorsements without disclosing the material connection.
- Referral inducements — payments or gifts that breach the Anti-Kickback Statute or Stark Law, especially for federally-funded care.
- Unapproved drug or device claims — outside FDA-cleared indications.
- Guaranteeing outcomes — "guaranteed", "risk-free", "cure" language.
What stays firmly allowed
- Accurate factual information — services, board certifications, credentials, locations, hours and fees.
- Patient education — explaining conditions, procedures and options in balanced terms.
- Truthful testimonials — with patient authorization, substantiation, and disclosure of any non-typical results or paid relationships.
- A complete Google Business Profile — the main way US patients find local care.
- Payer-network clarity — making the insurance plans you accept obvious and easy to check.
- Honest reviews — responding professionally and never fabricating or incentivising them.
Testimonials are allowed — but HIPAA changes everything
Here's where the US differs from markets like the UK and Australia, where clinical testimonials are effectively banned. In the US you may use patient testimonials — but any use of a patient's identifiable information, image or story for marketing generally requires their written HIPAA authorization, and the FTC expects the testimonial to be genuine and not imply results that aren't typical. So a patient review on Google is one thing; lifting that review, name or photo into your own advertising without authorization is a compliance problem. Get the authorization, keep it on file, and disclose where results vary.
Sell patient acquisition, not note-taking
The US physician's inbox is flooded with AI vendors — and most of them sell the same thing: ambient scribes and note-taking. That's a crowded, commoditised race. The practices that actually grow use AI and marketing for the outcome that moves the needle: attracting and keeping patients. Being genuinely findable, answering patients' real questions better than anyone else locally, responding fast, and being easy to book and to pay — that's the positioning that stands out in a noisy market. (See attracting patients with AI.)
The ethical way to grow a practice in the United States
In a self-regulated market, the ethical practice has an edge: it can move fast and sleep at night. Be genuinely findable through an accurate Google Business Profile and website. Be the clearest educator in your specialty and area, because truthful education is always allowed. Make the insurance you accept obvious. Respond quickly, and earn honest reviews without fabricating or incentivising them. That compounding, trust-first system is what we teach in our guide to getting more patients ethically — and it sells the outcome US patients and practices actually want.
Before you publish — a quick compliance check
- Can we substantiate every objective claim with evidence, before publishing?
- For any testimonial, do we have signed HIPAA authorization on file?
- Does the testimonial avoid implying atypical results — or disclose that results vary?
- Are any paid or staff endorsements disclosing the material connection?
- Does nothing here offer an inducement that could breach the Anti-Kickback Statute or Stark Law?
- Are drug or device claims within FDA-cleared indications?
- Are we using only board certifications and credentials we actually hold?
Nishu Sharma is a healthcare growth coach and founder of the Ethical Healthcare Community, creator of the Patient-First Growth Framework. Her mission: help 100,000+ doctors, clinic owners and hospital owners grow with ethics and AI, so patients get their trust back in healthcare. Read her full story →