"We sanitize between every client." It is the line every med spa puts on its website. Almost none of them mean what they think they mean. Cleaning, sanitizing, and disinfecting are three different things, regulated by different agencies, and only one of them actually meets the standard most med spa procedures require.
The three definitions, per the EPA and CDC
Cleaning removes dirt and organic matter from a surface using soap or detergent and water. It does not kill germs; it physically lifts them off so a chemical treatment can work.
Sanitizing reduces the number of bacteria on a surface to a level considered safe by public health standards. EPA-registered sanitizers reduce bacteria by roughly 99.9 percent. They typically do not address viruses or fungi.
Disinfecting kills nearly all pathogens, including specified viruses and fungi, on a surface. EPA-registered disinfectants are tested against specific organisms, require a stated dwell time, and must be used on a surface that has been cleaned first.
Why this matters in a med spa
Procedures that break the skin (microneedling, injectables, laser resurfacing) require treatment surfaces that are disinfected, not just sanitized. The same is true for any room where bodily fluids may be present. Sanitizing is appropriate for low-risk surfaces like reception counters and waiting room tables; it is not appropriate for a treatment table, lamp arm, or instrument tray.
Using a sanitizer where a disinfectant is required is a compliance failure even when the surface looks visibly clean.
Three common mistakes
1. Skipping the cleaning step
A disinfectant cannot reach pathogens through a layer of dried product or organic residue. If you spray and wipe a soiled surface, you are spreading the residue, not disinfecting.
2. Ignoring dwell time
Every EPA-registered disinfectant has a contact time on the label, usually one to ten minutes. The surface must remain visibly wet for that full duration. Spraying and immediately wiping is the single most common mistake we see.
3. Using a sanitizer when the procedure requires a disinfectant
Read the label of every product on your back bar. If it only claims "kills 99.9 percent of bacteria," it is a sanitizer. For treatment surfaces you need a product registered as a hospital-grade disinfectant, with claims against the relevant viruses and fungi.
A simple decision rule for your team
- Reception counter, waiting room tables, retail shelves: clean and sanitize daily.
- Restrooms, locker rooms, break room: clean and disinfect daily, with documented dwell times.
- Treatment rooms: clean, then disinfect with an EPA-registered hospital-grade disinfectant, between every client, observing the full dwell time.
The TidyMole take
The most expensive misunderstanding in the med spa industry is the assumption that "sanitized" is good enough. It is not, and the rules say so. Train your team on the distinction, label every product on your back bar with its category and dwell time, and document the protocol so an inspector can see it without asking.