Is health a special ad category on Meta? (No, and that's exactly why it's confusing)

People keep asking me this, and the answer surprises them.

No. Health is not a special ad category.

Meta's special ad categories are credit, employment, housing, and social issues, elections and politics. For those, you tick a box and accept limits on targeting. It's a visible system: you know when you're in it, and you know the rules that apply.

Health works differently. It's handled through Meta's rules on personal health claims and on sensitive data. There's no category to select. There's no checkbox. There's no setting that says "this advertiser is in health".

And that's exactly why it's so confusing. When something goes wrong, it doesn't show up as a warning next to a setting you chose. It shows up as blocked events, dropped conversions and restricted accounts, often after the fact. You find out by symptoms, not by a message.

Let me spell out why that matters for how you should think about it.

Because there's no category, there's no flag you can check to know if you're "in". That means the only reliable way to stay safe is to look at what you're actually sending. The question isn't "did I select the right category?". It's "am I sending anything that could reveal a health condition or treatment?".

And that question has three parts, because data leaves a website in three main ways. The page link. The event name. The form fields. Each of them can hint at a condition or a treatment, and a hint is enough.

There's a useful test for it. Look at your events as a stranger would. Read the URL. Read the event name. Read the form fields. Then ask what a machine could infer about a person from just those three things. If the honest answer is "what they're being treated for", you have something to fix.

A second consequence of "no category": the rules can feel like they move. Because enforcement shows up through the data, a site change can trigger it as easily as a policy change. A new landing page with a treatment name in the address, a new plugin adding a title parameter, a form with a new question: any of them can quietly change what you're sending.

Let me give you a self-audit you can do in three columns, because "look at it as a stranger" is easier with a structure.

Column one is the URL. Green: yourclinic.com or a generic path like /book. Amber: a service category like /treatments/. Red: a named treatment, drug or condition, like /semaglutide or /acne-scarring.

Column two is the event name. Green: neutral, like L_1 or S_1, or a generic name like Lead. Amber: a service category. Red: anything naming a treatment, drug or condition.

Column three is the form. Green: name, email, phone. Amber: preferred time, location. Red: symptoms, conditions, medications, weight, anything clinical.

Go through your top five booking flows and mark each cell. Any red is a leak. Any amber is worth a second look. And keep the sheet: it's your record, and it's the thing to re-run after every site change.

One more point about "drift". Because there's no category to hold you in place, your setup changes whenever your site does. Decide who owns this check, by name, and put it in the calendar. Ownership is the difference between a setup that stays clean and one that was clean once.

Where do you think most clinics get caught: the URL, the event name or the form?

For reference, DataCops health mode is on every plan. It cleans each event on the way out: the link, the event name and the identity. It doesn't make an ad compliant, since Meta's rules on health claims still apply to the ad itself.