Starting a healthcare business, whether that’s a med spa, an IV hydration clinic, a primary care practice, or a psychiatry practice, requires the same five decisions regardless of vertical: business structure, licensing, physician oversight, compliant protocols, and startup budgeting. Skip one, and the rest of the launch stalls. Get physician oversight wrong alone, and state regulators can shut the business down before it opens.

Choosing Your Business Structure and Ownership Model

Business structure and ownership model determine which licenses you can hold and who controls clinical decisions in your practice. Founders typically choose between an LLC, a professional corporation, and a professional limited liability company, though the right structure depends on your state and services. In 33 states plus the District of Columbia, corporate practice of medicine (CPOM) doctrine restricts non-physician ownership of clinical decision-making entirely.

• LLC: Offers straightforward liability protection but doesn’t satisfy CPOM restrictions in states that require physician ownership of clinical decisions.
• Professional Corporation (PC): Requires physician ownership and is the standard structure in most CPOM states for clinics offering delegated medical services.
• Professional Limited Liability Company (PLLC): Functions like a PC in states that recognize it, pairing licensed-professional ownership with LLC-style liability protection.
• Management Services Organization (MSO): Lets a non-physician own the business side of operations while a physician-owned PC or PLLC retains clinical control.

Getting this wrong carries real consequences. In 2026, the California Attorney General settled with Carbon Health Technologies for $4.4 million after regulators found the company’s management arm controlled physician staffing and replacement decisions, a textbook CPOM violation. Med spas and aesthetics businesses most often use this structure, since clinical authority must route through a licensed physician even when a non-physician runs daily operations.

Licensing and Facility Requirements

Healthcare business licensing splits into three categories: business licenses, facility licenses, and professional licenses for each clinician on staff. Which combination applies depends entirely on your state and vertical. Timelines vary as much as the requirements themselves, so sequencing them correctly determines your opening date.

• Business License: Issued by your city or county and required before you can legally operate as a company, separate from any clinical licensing.
• Facility License: Issued by the state health department and tied to the specific type of clinic or service you’re operating.
• Professional License: Required individually for every clinician on staff, including nurse practitioners, physician assistants, and physicians.
• National Provider Identifier (NPI): Free through NPPES and often issued within days, though the federal system allows up to 20 business days for processing.
• DEA Registration: Costs $888 for a three-year term and typically takes four to six weeks to process if your services involve controlled substances.
• Medicare/Medicaid Enrollment: Requires a minimum of 60 to 90 days for approval once submitted through PECOS.
• Insurance Credentialing: Can take more than four months to complete and should start as early as possible in your timeline.

IV hydration businesses face a facility licensing sequence tied specifically to infusion services, on top of the categories above.

Physician Oversight: Medical Director or Collaborating Physician

Most delegated medical services, from injectables to IV therapy to prescribing, require a medical director or a collaborating physician before you treat a single patient. Corporate practice of medicine rules, active in 33 states, make this oversight a legal requirement, not an optional formality. The role you need depends on how your services are delivered and who is providing them.

• Medical Director: Oversees clinical protocols, standing orders, and facility-wide compliance across the entire practice.
• Collaborating Physician: Supervises one specific clinician, such as a nurse practitioner or physician assistant, under a formal written agreement.

Med spas need this in place before the first injectable procedure, since supervising physician requirements are typically tied directly to the specific aesthetic service being offered. The agreement itself has to hold up under state scrutiny, too, since a poorly structured oversight arrangement can be treated as non-compliant even when a physician is technically named.

Building Compliant Protocols From Day One

Protocols, standing orders, and documentation standards need to exist before opening day, not after your first patient complaint or audit. This includes clinical protocols for delegated services and HIPAA-compliant privacy and security policies for handling patient data. Treating either as an afterthought gets expensive fast.

• Clinical Protocols: Written standing orders and treatment protocols for every delegated service, reviewed and signed by your medical director or collaborating physician.
• HIPAA Risk Analysis: A documented, current risk assessment of every system storing patient data, the single most cited violation in OCR enforcement actions.
• Breach Notification Procedures: Written steps for identifying, reporting, and notifying patients of a data breach within HIPAA’s required timeframe.
• Penalty Exposure: OCR fines in 2026 range from $145 to more than $2.19 million per violation category depending on culpability, and the agency issued $148 million in total HIPAA penalties in 2025 alone.

Build your documentation standards alongside your physician oversight agreement rather than as a separate project. Both govern the same clinical relationships and typically reference each other directly, so a gap in one usually shows up as a gap in the other during an audit.

Budgeting for Startup Costs and Timeline

Startup costs for a healthcare business range widely by vertical, and physician oversight is the line item founders most consistently underbudget. Costs depend on services offered, equipment needs, and whether you build clinical oversight in-house or through a placement service. Build your timeline around the slowest-moving requirement, not the fastest.

• Solo Primary Care Practice: Typically launches for $70,000 to $100,000 in startup costs.
• Multi-Physician Specialty Practice: Equipment and staffing needs can push startup costs to $300,000 to $500,000 or more.
• Med Spas and IV Hydration Businesses: Usually fall on the lower end, closer to $50,000 to $100,000, depending on services and location.
• In-House Medical Director: Can run into six figures annually once salary, benefits, and malpractice coverage are factored in.

Insurance credentialing usually outlasts every other requirement on this list, which is why many founders start clinical operations with an outsourced physician placement, then transition to in-house oversight once patient volume and cash flow support it.

How Medical Director Co. Supports First-Time Healthcare Business Owners

Medical Director Co. places a licensed medical director or collaborating physician within 24 hours in most states, 12 hours in Texas, for a flat $799 a month with no long-term contract. That single placement resolves the physician oversight requirement that stalls most new healthcare businesses before they open, and it includes compliant documentation prepared by our in-house healthcare attorney. Founders keep full control of daily operations. MDCo handles the physician relationship and the compliance paperwork behind it.