Meta put your store in the health category. Here's what's happening, and why

The orders are still coming through the till. The ads are still running. But some time in late September, Meta stopped learning from either. Purchase events thinned out in Events Manager, reported ROAS slid towards zero, and nobody had touched a line of code.

If you sell mobility aids, supplements, menopause support, products for people living with dementia, or anything else a purchase could link to a medical condition, this may already be your story. It isn't a bug, a tracking fault or a rejected ad. Meta has decided your website belongs in its health and wellness category, and it has stopped using the data that tells its algorithm who buys.

We started digging when restrictions began landing on brands we work with and some we didn't work but came asking for help. A few weeks later Meta held a webinar for health and wellness advertisers, which may or may not be a coincidence. What follows is everything we've pieced together since, so you don't have to.

A label on your website

Since early 2025 Meta has sorted the websites that send it data into data source categories. Health and wellness is one of twelve restricted ones, alongside financial services, religion, politics and personal hardship. What changed this autumn is how widely, and how firmly, the labels are being applied. Stores that had run Meta for years, most of them making no health claims at all, were reclassified within weeks of each other.

The label decides what Meta will use, at one of three levels:

Which level you get depends on your category and on where your customers are. Meta says restrictions "may vary across data source categories and can be specific to certain countries or regions", but doesn't publish which is which. Its webinar and its partner team are consistent on the ones that matter most here:

So a UK brand judged to serve a specific medical condition keeps sending Meta its purchases, and Meta sets them aside. Campaigns don't pause. They just optimise blind.

To see where you stand, open Events Manager and go to Settings › Manage data source categories. If the health and wellness box isn't greyed out, someone on your account ticked it, and you can untick it yourself. Check that before anything else.

Association, not claims

One word explains most of the confusion: associated. Meta's definition catches any site that "is associated with medical conditions or specific health statuses … or health-related products and services". You don't need to promise a cure. You only need to serve a condition. A shop selling activity kits for people living with dementia, with no claims anywhere, lands in the same place as one selling arthritis supplements.

Meta reads the site, not just the ads: page titles, collection names, URL paths, product copy, the contents of your event data, even your Facebook Page and Instagram bio. Forms count too, so a checkout pop-up asking customers to declare a condition for VAT relief is a red flag. And it doesn't matter who buys. Plenty of these brands sell mostly to carers and family; the review "looks at what the website promotes rather than who is buying".

That's also why a perfectly compliant ad offers no protection. Meta's advertising standards govern what an ad says. Data source categories govern what a website sends. In Meta's own words: "An ad can be perfectly compliant and the website behind can fall under a category that comes with additional data sharing restrictions."

Why Meta wants to know less

Meta doesn't publish a single reason, but the context is hard to miss.

In the US, a long-running class action over patient data sent through pixels on hospital websites reached class certification at the end of October. In 2025 a California jury found Meta liable for receiving reproductive health data from the Flo period-tracking app. The FTC has fined advertisers, GoodRx and BetterHelp among them, for passing health data to platforms. Meta has been filtering health terms out of incoming data since at least 2021. Classifying the whole website is the logical next step.

In Europe the law goes further. The EU's top court has ruled that browsing data which could reveal someone's health, even indirectly, is special-category data, and that an online order of non-prescription pharmacy products is health data. Under Meta's own terms, the advertiser and Meta are joint controllers of event data used for ads, under both the GDPR and the UK GDPR. If your pixel reports a purchase that implies a condition, Meta is co-processing health data. That's why the UK and EU sit in the strictest tier.

The result: Meta has made you part of the responsibility. Under its Business Tools Terms you warrant that you won't share data that "includes or is based on, directly or otherwise, health information". "Directly or otherwise" is doing the heavy lifting. A purchase that implies a condition counts, and if that data reaches Meta, the breach of warranty is yours.

Meta, in other words, isn't judging your marketing. It's managing its liability for knowing things about people's health, and the courts have told it a shopping basket can be enough. (None of this is legal advice. Meta itself tells advertisers to take their own.)

Your options, honestly

There's no allowlist. If you think you've been miscategorised, fix the site first: rename what reads as condition-specific, clear out the forms and snippets, and make sure the changes are live. Then request a review in Events Manager. It takes a few days, and the restrictions stay on while it runs. If that's declined, Meta's legal team can carry out a manual review, usually requested through a Meta representative rather than support. Its decision is final, and if it goes against you, you wait 30 days to try again. Bear in mind that the pages you rename for Meta may be the ones carrying your organic search traffic.

Some brands are categorised correctly. If your product exists to serve a condition, no review will change that, and it's wiser to plan as though the restriction is permanent.

What doesn't work is just as useful to know. Renaming purchase events to something neutral fails: Meta blocks "similar custom events", and its terms say "you must not attempt to send data that has previously been detected and removed". Server-side tracking doesn't route around it either, because data sent through the Conversions API "is subject to the same categories and restrictions as the Pixel". Showing Meta's crawler a sanitised version of your site puts the ad account itself at risk. Anyone selling a way back in deserves scepticism.

What's still yours to control

No tracking setup changes Meta's category. What your tracking decides is how much the restriction costs you everywhere else.

That starts with precision. Whatever Meta can't receive should never reach it, whether that's condition terms in URLs, parameters, event names or form fields. Meta is blunt that its own filters don't cover you: "Meta's systems are not a substitute for your own compliance mechanisms." The blunt fixes, such as stripping data at source or switching events off across the site, quietly take Google, TikTok, email and analytics down with Meta. Respecting your customers' privacy means redacting exactly what shouldn't be shared, and nothing that should.

Next, keep your own record. When Meta's reported ROAS drops to near zero but sales don't, only a first-party, order-level view of what each channel drove tells you whether Meta stopped working or just stopped reporting. Without it, budgets get cut on bad evidence, right before peak.

Finally, measure what Meta can't see. Meta's own advice to restricted advertisers is to use marketing mix modelling or multi-touch attribution through third parties. MMM works on aggregated spend and sales rather than individual events, so no category touches it. Meta's open-source Robyn and Google's Meridian are the obvious starting points, though neither is a weekend project.

Meta itself still works, just differently. Optimise for the upper-funnel events it still accepts, such as product views and landing page views. Under full restriction, use awareness, engagement and traffic objectives. Customer-list audiences remain available. Expect clicks rather than buyers, and judge the results on your own sales data, not Meta's.

The takeaway

Meta has decided it would rather not know what your customers buy when the purchase hints at their health, and the law gives it every reason. You can check the label, fix the site and appeal once. Beyond that, it isn't yours to control.

Your tracking is. Make it as robust as possible across every channel, while respecting your customers' privacy by redacting what shouldn't be shared. Then Meta's decision about what it uses won't cost you sight of everything else.

Not sure which category your store is in, what it's blocking, or whether your other channels are paying for it? Signal's free tracking audit will tell you.