How to Audit the Automation You Already Have at Your Med Spa

I helped a med spa owner do this audit last month. By the time we were done, she had counted 23 different automated communications going out of her business. She had personally set up four of them. The other 19 were running on autopilot, some for years, some from vendors she didn't realize she was still paying.

A few of them were actively making her look bad. One was a birthday email that referenced a promotion she'd discontinued two years ago. Another was a follow-up text from a CRM platform she'd churned off six months earlier, still pulling from a phone number she no longer owned. A third was a Google review request firing 12 hours after every appointment, which her patients had been complaining about because it felt pushy. She didn't know any of this. Nobody had ever audited it.

This is normal. Most med spa businesses have accumulated automation the same way they accumulated other things: piecemeal, over time, set up by different people for different reasons, and rarely revisited.

This post is a practical walk-through of how to audit what's actually running in your business. Set aside a couple of hours and open a spreadsheet.

The exercise that surfaces everything

The most effective way to start is to become a patient at your own med spa. Use a personal email and phone number you don't normally use. Book a consult through your website. Show up. Reschedule it once. Cancel the rescheduled one. Then sit back for the next four weeks and write down every text, every email, and every notification you receive.

Don't filter. Don't skip anything. Write down the trigger, the channel, the sender, and the exact words.

By the end of four weeks, you'll have a list. The list is almost always longer than owners expect.

The reason it's longer is that automation accumulates. When you signed up for your booking software, you got their reminders. When you added your CRM, that platform added another set. When the marketing agency you hired in 2023 set up a campaign, that's still running too. When you switched email providers, the old provider's automations might or might not have been disabled.

Every owner I've talked to has had at least one automation in this audit that surprised them.

The five categories worth separating

Once you have the raw list, group everything into five buckets.

The first is appointment-driven. Confirmations, reminders, day-of texts, post-visit thank-yous. These exist to reduce no-shows and smooth the patient experience. They tend to be the highest-value automations in any med spa and also the most likely to have duplication issues.

The second is review and reputation. Anything that asks the patient to rate, review, or recommend you. These tend to come from multiple sources, often firing on similar timelines, and patients hate getting hit twice.

The third is marketing and re-engagement. Birthday emails, "we miss you" sequences, treatment-specific follow-ups, seasonal campaigns. This is where the most dead automations live. Stuff that was set up for a launch in 2022 and never turned off.

The fourth is lead nurture. Touchpoints to people who inquired but never booked. Most med spas have either too few of these or too many duplicates running in parallel from different platforms.

The fifth is internal. Staff notifications, reporting emails, alerts. These don't go to patients but they shape your team's day. They're often the ones nobody has audited because they don't seem urgent.

The four questions worth asking for each one

Go down the list. For every automation, you're asking four things.

Is the content still accurate. Read the actual words. Most automated messages reference something time-bound: a treatment, a price, a promotion, a doctor who no longer works there. The message was right when it was written. Often it isn't anymore.

Does anything else in your stack fire near it. This is where most owners find their first real problem. A patient who books a consult might get a confirmation from the booking platform, a different confirmation from the CRM, and a third welcome email from the marketing tool. None of them know about the others. The patient gets three messages in 20 minutes and tunes out.

Is it still serving the goal. Some automations were set up for a campaign that's long over. Others were set up to solve a problem that no longer exists. A weekly "where is the patient in their consult journey" digest for the team is great when you're a single-location practice with 30 leads a month. It's useless noise when you're three locations with 600 leads.

Is it actually firing. This sounds obvious but you'd be surprised. Platform changes, expired API integrations, and silent vendor migrations break things constantly. The automation looks active in the admin panel. It just doesn't go out anymore. Ask your team if they ever see it land.

What to do with what you find

After the audit, you'll have one of three answers for each automation. Keep it as is. Update it. Or kill it.

The "kill it" pile is usually bigger than owners expect. Most med spas are running at least 30% more automations than they need. Cutting that fat doesn't just clean up the inbox of every patient on your list. It cuts software costs (some of these are paid features), reduces SMS sending fees, and makes the audit tractable to repeat next year.

The "update it" pile is where the real wins are. Outdated content, conflicting timing, and abandoned sequences fixed up to actually serve the business. This is the work most owners never get to because the audit step never happens.

The "keep it" pile is what you actually want running. Now you know what's there. Now you can defend it.

Why this matters more than people think

Automation in a med spa isn't a feature you add. It's an environment your patients live in. Every text they get from you, every email, every notification, contributes to the brand experience whether you meant it to or not.

A patient who gets three reminders for one appointment thinks your business is disorganized. A patient who gets a "happy birthday, here's $25 off Botox" email two years after the offer expired thinks you don't pay attention. A patient who gets a review request 12 hours after an injectable appointment, when they're still swollen, thinks you don't care.

These are all caused by automation. You can't fix any of them without first knowing they exist.

The audit is the only way to know.

Where MedspAI fits

When clients come on with us, the first thing we do is help them audit what they already have. Half the time we're asking them to disable existing automations because we now handle them better. The other half we're leaving alone because they're already working and our job is to fill the gaps, not duplicate what's there.

We don't add to the noise. We help you take an honest look at what your business is already sending and decide what should keep firing, what should change, and what should stop.

If you're not ready to talk about MedspAI yet, do the audit anyway. It's worth the afternoon either way.