Check your product URLs before Meta does

🚨 Worth posting here for anyone running health and wellness, because this one arrives without warning.

A personal wellness brand opened Ads Manager and their bottom funnel events were gone. Audience restricted, ROAS reporting dark. They had changed nothing that week.

In early 2025 Meta rolled out data restrictions across health and wellness, finance and a few other categories. Health and wellness took the hardest hit, and most of the affected brands never got told why.

What was happening in this account: their product URLs contained PHI. Not in any form anyone had thought about, just product names describing a condition or use case, sitting in the URL like any other product page. Those URLs went into Meta’s query strings on every event, which is exactly what the data restrictions are built to catch.

Shopify’s default CAPI setup had no opinion about it. It forwards standard events and does not inspect what is inside them. So the compliance exposure was being transmitted automatically, every session, by the setup they thought was the safe option.

The fix took seven days. Stopped sending data browser-side and moved to server-side tracking. Scrubbed PHI and direct PII out of the events and URLs so the payload stopped tripping Meta’s filters. Rebuilt the event structure to be HIPAA compliant rather than just renaming events, which is the shortcut most brands try first and which does not survive review.

Full funnel tracking came back, event match quality recovered, and they were measuring by product again at a stable 2.9 ROAS. None of it needed an engineering sprint.

If you have not been flagged yet, open one of your own product URLs and ask whether the slug itself describes a condition. That is usually where it starts.

Start your free trial: https://app.customerlabs.com/signup/?utm_source=circle&utm_medium=community&utm_campaign=hipaa_restriction

Featuring Trisha.

Question for the group: has anyone here been restricted and had to work out the cause themselves? What was it in your case?

#HealthAndWellness #MetaAds #HIPAA #DataCompliance #1PDOps