Meta ad account restricted for health and wellness: what it means and what to do first

You open Ads Manager and something is off. Conversions have flatlined. Events are marked as restricted. Cost per lead is climbing, and nobody changed a thing.

Welcome to the club nobody applies to join.

Here's what makes it so confusing: health isn't a special ad category on Meta. The special ad categories are credit, employment, housing, and social issues, elections and politics. Health is handled through separate rules, on personal health claims and on sensitive data. That's why there's no box you ticked and no setting to check. It shows up as blocked events and a restricted account, and it tends to arrive without ceremony.

Let me walk through what actually happens, in order, because the order is where the money goes.

Events get blocked or stripped of detail. The data you send gets held back or thinned out. Then match quality drops, so fewer of your conversions can be tied to a real person. Then cost per lead climbs, because the algorithm is now learning from less. And finally campaigns stall: they stop finding new patients.

Notice what's missing from that list: anything about your ad. That's the trap. The ad is usually fine. The damage is in the data that travels with it, and the natural reaction, fixing the creative, treats a symptom while the cause keeps running.

Where does the offending data come from? Three places, almost always. The page link: a booking page for a specific treatment or condition tells the ad platform more than it should see. The event name: a custom event named after a service can be read as health information. And the form: a field that asks about a condition, or a page that displays one, goes out with the event.

So what do you do first? I'd think of it as a 48-hour plan, in this order.

First, find the leak. Open Test Events, trigger a booking on your own site, and read the event as a reviewer would. What does the URL say? What's the event called? What does the form send? Write down every event and what it carries.

Second, stop sending it. Clean at the source, and don't just tweak one field and hope. A partial fix leaves the account with a mixed record, which is harder to explain than a clean one.

Third, keep a record of what you send. This is the step most people skip, and it's the one that matters when someone asks. "Here is exactly what left, event by event" is a far stronger position than "we think it's fine".

Fourth, ask for a review, once the data going out is clean and you can show it.

Here's a made-up before and after. Before: page yourclinic.com/treatments/weight-loss/apply, event called WeightLossApplication, and a form field "current medications". After: page yourclinic.com, event L_1, the medication field not sent, and what's attached is a hashed email, a hashed phone and the ad click. Same conversion, nothing that describes anyone's health.

A note on what not to do in the first week, because panic makes it worse. Don't delete your pixel to "start fresh": you lose the history and the record of what you were sending. Don't change the creative, the audience and the landing page all at once, because then neither you nor a reviewer can tell what mattered. And don't spin up a new ad account to work around it. Getting around a restriction tends to make the situation worse, and it looks exactly like what a reviewer is watching for. Fix the cause in the account you have, keep the evidence, and be boring about it.

For reference, DataCops health mode cuts page links to the domain, uses neutral event names, hashes email and phone and leaves out anything that could describe a person's condition. It doesn't guarantee an outcome, because the decision is Meta's.