Payments-first booking for new and solo med spas
A low-cost, payments-first booking tool that's ideal for new and solo med spas — provided you confirm HIPAA BAA scope and treat it as front-of-house only, not a clinical EMR.
Square Appointments is the scheduling product in Square's broader commerce ecosystem, pairing online booking and calendar management with the integrated card processing, hardware, and point-of-sale tools that made Square a default for small businesses. For med spas it functions as a booking-and-payments layer rather than a clinical system: clients self-book, leave a card on file, and can be charged deposits or no-show fees, while checkout, tipping, and reporting run through the same Square account. Its payments-first heritage means transactions, hardware, and payouts are mature and familiar, and the free solo tier makes it one of the lowest-friction ways for a new practice to get a booking page live.
From a compliance standpoint, med spas should proceed carefully. Square offers HIPAA-capable intake forms and will act as a Business Associate for explicitly HIPAA-enabled features, but BAA coverage is limited and configuration-specific, and PHI can leak through appointment names, notes, and reminders if staff aren't disciplined. Treat Square Appointments as a strong front-of-house booking and payments tool and confirm BAA scope directly with Square before storing or transmitting any protected health information. It is not an aesthetics EMR, and documentation-heavy clinics will need a dedicated charting solution alongside it.
Ideal customer
New, solo, or small med spas that want a low-cost, easy on-ramp to online booking with mature integrated payments — and that will keep PHI out of Square or confirm BAA scope before relying on it.
Square Appointments is best understood as a booking-and-payments layer on top of Square's POS, not a med-spa clinical platform. Its natural home is the new, solo, or small aesthetic practice that wants a professional booking page, deposits, and integrated card processing without a big upfront commitment. Because the entry tier is genuinely free for a single solo operator, it's one of the lowest-friction ways to start taking online appointments, and the payments side benefits from Square's mature, widely trusted processing and hardware.
For a med spa, the appeal is operational simplicity: clients self-book, leave a card on file, and check out through the same system that handles your retail, tips, and payouts. If your priority is getting booking and payments live quickly and cheaply, Square is a strong starting point.
The biggest caution is HIPAA and clinical fit. Square offers HIPAA-capable intake forms and will act as a Business Associate for explicitly HIPAA-enabled features, but BAA coverage is limited and configuration-specific, and PHI can leak through appointment names, treatment notes, and reminder text if staff aren't disciplined. Any med spa handling protected health information should confirm BAA scope directly with Square before relying on it, and keep clinical detail out of fields that aren't covered.
Beyond compliance, Square is not an aesthetics EMR — there's no real charting, consent management, or before-and-after photo workflow, so documentation-heavy clinics will need a dedicated clinical tool alongside it. Advanced multi-staff scheduling lives on the paid Plus and Premium tiers, and processing fees of roughly 2.6% + 10¢ add up as volume grows. Support is serviceable but oriented to Square's broad small-business base rather than med-spa specialists.
Choose Square Appointments if you're a new or solo med spa that wants booking and payments in one familiar, affordable system and you'll either keep PHI out of the platform or validate BAA coverage with Square first. Practices that need deep clinical documentation, or that are scaling into multi-location complexity, will likely outgrow it and should pair or replace it with a purpose-built aesthetics platform.
By Med Spa Vendor Hub Editorial Team. Last reviewed June 29, 2026. Independent editorial review — how we score.
Free plan for solo operators (one location); Plus $49/mo per location; Premium $149/mo per location. All plans add card processing of roughly 2.6% + 10¢ for in-person tapped/dipped payments (rates vary by plan and by online vs. in-person). Hardware sold separately. Confirm current rates and BAA scope on Square's site.
Free
$0/mo
per location
Core online booking, calendar, and payments for solo operators at a single location.
Plus
$49/mo
per location
Adds multi-staff scheduling, customizable booking, cancellation policies, and lower processing rates.
Premium
$149/mo
per location
Advanced scheduling, staff/commission management, and the lowest in-person processing rate.
Pricing is researched from public sources and verified periodically; confirm current rates with the vendor.
Independent ratings from third-party review platforms, cited with sources. These are not our score.
A vendor-neutral guide to choosing booking and payments software for a med spa—covering why this is its own decision, the HIPAA filter that rules most platforms in or out, capabilities, payment economics, and how to match a tool to your stage.
Med spa booking and payments software has three cost layers: subscription, payment processing percentage, and marketplace or add-on fees. Here's a transparent 2026 breakdown of real prices - and why processing fees often matter more than the monthly plan.
Booking & PaymentsAcuity Scheduling is a flexible, booking-first self-scheduling platform with payments, deposits, packages, and memberships, plus a HIPAA-enabled option on its top tiers — widely used by solo injectors and med spas.
Booking & PaymentsBooker by Mindbody is a spa- and salon-focused booking, point-of-sale, membership and marketing platform — a distinct product from the standalone Mindbody platform, aimed at front-of-house operations rather than clinical charting.
Booking & PaymentsBooksy is a consumer-marketplace booking app for beauty and grooming businesses with integrated payments, strong on client acquisition — but it is not HIPAA-compliant, which is a meaningful limitation for med spas handling protected health information.
