Threads and Bluesky for medical practices

Threads and Bluesky are text-first social apps where people post short updates and reply to each other in public. A medical practice can use either one to share health information, office news and staff expertise. The two work differently. Threads is a Meta product tied to Instagram and carries Meta’s ad system. Bluesky runs on an open protocol with layered moderation, and none of the Bluesky pages we read describes a paid ad product. Both bring the same patient privacy and advertising rules that apply to each other channel a practice uses.

This guide covers what each platform’s terms and rules say, how ads on Threads work and which Meta health ad rules come with them, how Bluesky moderation and labels affect a practice account, and the FTC and HIPAA limits on staff posts and patient content. For related topics, see our guides to X (Twitter) for medical practices, Facebook and Instagram ads for medical practices and writing a social media policy for a healthcare practice.

This is general information, not legal advice. Sources cited were checked on November 1, 2026: the Threads Terms of Use (updated May 28, 2025); the Meta Advertising Standards pages Health and Wellness (latest change log entry July 23, 2026) and Privacy Violations and Personal Attributes (latest change log entry June 26, 2024); the Meta for Developers post Ads in Threads (May 19, 2025), read through an archived copy dated July 9, 2026, because the page does not load from our server; the Bluesky Terms of Service (last updated August 14, 2025), Community Guidelines (last updated September 19, 2025), Privacy Policy (last updated August 14, 2025) and User FAQ (no date shown); the Bluesky blog posts Bluesky’s Stackable Approach to Moderation (March 12, 2024) and A New Form of Verification on Bluesky (April 21, 2025); 16 CFR 255.1 and 255.5(a); 45 CFR 164.501, 164.502(a) and 164.508(a)(3); and 15 USC 45(a)(1) and 52. Both companies change these pages without notice, so check the current versions before you post or advertise. We found no federal rule or agency guidance written for Threads or Bluesky use by medical practices as such. State rules differ, so have a health care attorney review your advertising.

The short version

Threads runs under its own Terms of Use, which supplement the Instagram Terms of Use and the Meta Community Standards. You sign in with an Instagram or Facebook account.
Meta’s May 2025 developer post says Threads ads appear between posts in the Threads home feed, that standalone Threads campaigns were not supported and that Instagram feed had to be selected too. Meta’s ad rules on health claims and personal attributes come with them.
Bluesky’s Community Guidelines bar undisclosed commercial content, sharing someone’s medical data and unlawful sale of prescription medications.
Bluesky’s Privacy Policy says posts are public and direct messages are unencrypted and can be accessed for Trust and Safety purposes. Keep patient conversations out of DMs on both apps.
On both apps, a deleted post may live on in other services connected through the open protocols. Treat each post as permanent.
Staff who post about the practice have a business relationship the FTC treats as a material connection, and HIPAA bars posting patient information without written authorization.

What Threads is and which terms apply

The Threads Terms of Use say Threads is built by Instagram and is one of the Meta Products. The terms supplement and amend the Instagram Terms of Use and the Meta Community Standards, which they incorporate by reference. You sign up and log in with an Instagram account, a Facebook account or another account Meta enables, and you are solely responsible for activity on your profile. Content you upload or share must comply with the Meta Community Standards.

Two parts of the terms matter for a practice. The first is deletion. When you ask to delete your Threads profile, the terms say the deletion process begins no more than 30 days after the request and may take up to 90 days, and removal from backups may take up to another 90 days. Content others have reposted or shared stays until they delete it.

The second is sharing to other services. Threads has optional interoperable capabilities that connect it to an open protocol used by third-party services. If you turn them on, Meta shares your posts and interactions with those services, and the terms say deleted content may continue to be stored on third-party servers Meta does not control. For a practice, the lesson is the same either way: anything posted can outlast your decision to remove it, so patient details never belong in a post.

How ads on Threads work

Meta announced ads in the Threads feed to developers on May 19, 2025. The post says ads appear between organic content in the Threads home feed, that the available objectives were Reach, Traffic and Website Conversions and that Meta’s Community Standards and Monetization Policies apply, with an inventory filter for the sensitivity of nearby content. It also said standalone Threads campaigns were not supported, that Instagram feed had to be selected as well, and that advertisers needed a Threads profile. Meta may have changed these details since May 2025, so check the placement options in Ads Manager before you plan a Threads budget.

Because Threads ads are part of Meta campaigns, a practice that runs Facebook or Instagram ads may already be on Threads without meaning to be. Check the placement breakdown in your reports, and decide on purpose whether the Threads feed belongs in the plan.

Meta health ad rules that come with Threads ads

Meta’s Health and Wellness ad standard sets age and content limits. Ads for weight loss or weight gain products and services, and for cosmetic products, procedures or surgeries, must be targeted to people at least 18 years old. Within those ads, Meta bars statements that attack a person’s appearance, body parts or hygiene, and for weight loss ads, images that pinch fat on a body area. The page lists cosmetic procedures it allows for adults, including dermal fillers, injectable treatments, chemical peels, micro-needling and laser treatments, and it allows before-and-after depictions for general cosmetic products and procedures.

The same standard bars claims, including those from health professionals, to cure, heal or eliminate a listed set of incurable diseases and terminal illnesses, among them diabetes, cancer, Alzheimer’s and Parkinson’s. It notes that claims about treating or managing symptoms are a different matter. It also bars clickbait in a health context, such as sensational language or promises of specific outcomes within a set timeframe without disclaimers or qualifiers.

Meta’s Privacy Violations and Personal Attributes standard is the one practices trip over in ad copy. Ads must not assert or imply personal attributes, including physical or mental health and medical conditions, and must not imply knowledge of medical information about the person or their family. Copy like “Struggling with your back pain?” speaks to the reader’s condition. Copy that describes the service, such as “Back pain care with same-week visits”, focuses on what you offer. Our guide to Facebook and Instagram ads for medical practices covers Meta’s targeting limits in more detail.

What Bluesky is and which rules apply

Bluesky Social, PBC runs the Bluesky app on the AT Protocol, an open protocol other apps can also use. Its Terms of Service, Community Guidelines, Privacy Policy and Copyright Policy together govern use of the app, and they apply only to Bluesky itself, not to other apps on the protocol. The terms require users to be at least 13 and to meet the local age to enter a binding agreement. A person using Bluesky for a company confirms they have the authority to represent it, and you must not share an account or use someone else’s.

The Community Guidelines contain rules a practice account should know.

Commercial content. Do not post undisclosed commercial content, sponsored material or advertising without clearly identifying its commercial nature.
Privacy. Do not share home addresses, personal contact information, financial or medical data, or identification documents.
Regulated goods. Do not use Bluesky to unlawfully sell, advertise or facilitate transactions for controlled substances or prescription medications.
Authenticity. Do not impersonate others, create fake accounts or artificially manipulate engagement metrics or follower counts.
Mental health. Do not share content that promotes self-harm, suicide or eating disorders. Verified mental health resources and crisis prevention information are listed as protected expression when appropriately labeled and framed.

Bluesky’s Privacy Policy says posts and comments are public and that direct messages are unencrypted and can be accessed for Trust and Safety purposes. The Terms of Service add that if you delete your account, Bluesky notifies other services on the protocol, but it cannot force them to remove your content, so complete deletion across the network may not be possible.

Bluesky moderation, labels and verification

Bluesky describes its moderation as stackable. Its March 2024 blog post and its User FAQ say Bluesky runs automated filtering and its own moderation team, and that independent moderation services can label posts and accounts. Users choose which labeling services to subscribe to, and those labels can hide or flag content in their view. A practice post can therefore look different to different readers, depending on the labelers they follow. Under the Terms of Service, an account that is suspended or restricted can appeal, and the appeal must be filed within two weeks.

Bluesky’s April 2025 verification post describes two signals. The first is a domain handle: you set your website’s domain as your username, and Bluesky encourages official organizations to do this because it links the account to the website. The second is a blue verification badge, which Bluesky grants to authentic and notable accounts, or which trusted verifier organizations can issue. For a practice, the domain handle is the step you control. It shows readers the account belongs to the practice that runs the website.

None of the Bluesky pages we read describes a self-serve ad product, and its Privacy Policy says Bluesky does not sell or share personal data for targeted advertising. Reach on Bluesky comes from posts, replies, custom feeds and follows. Check Bluesky’s current pages before you assume this is still true.

Staff posts and the FTC

When a dentist, nurse practitioner or front desk lead posts about the practice from a personal account, they are endorsing their employer. Under 16 CFR 255.5(a), a connection between an endorser and the seller that might materially affect the weight of the endorsement, and that the audience would not reasonably expect, must be disclosed clearly and conspicuously, and the rule names a business relationship as one such connection. 16 CFR 255.1 requires endorsements to reflect the endorser’s honest opinions and experience, and says an endorsement may not convey a claim that would be deceptive if the advertiser made it directly.

The FTC Act sits behind both. 15 USC 45(a)(1) declares unfair or deceptive acts or practices unlawful, and 15 USC 52 makes it unlawful to disseminate a false advertisement likely to induce the purchase of services or cosmetics. A short post is still an ad if it promotes the practice. We recommend a plain disclosure in staff bios and in posts that promote the practice, such as “I work at [practice name]”, and a written rule that staff never post a patient story, photo or case. Our guide to staff posting on Reddit, forums and Wikipedia covers the same issue on other platforms, and our social media policy guide shows how to write it down.

Patient information on Threads and Bluesky

For a HIPAA covered entity, 45 CFR 164.502(a) permits uses and disclosures of protected health information only as the Privacy Rule allows. Using protected health information to encourage someone to buy a service is marketing under 45 CFR 164.501, and 45 CFR 164.508(a)(3) requires the patient’s written authorization for marketing, with narrow exceptions. A patient photo, a case story, or a reply confirming that someone is your patient can each disclose protected health information.

Replies are the risk on text-first apps. When a patient posts about their visit and tags the practice, a reply that names their treatment confirms they are a patient. We recommend a reply that thanks them, says nothing about their care and invites them to call the office. Our guide to replying to negative reviews without breaking HIPAA covers the federal enforcement cases on replies that disclosed patient information. For any patient story the practice wants to share, see our guide to patient testimonials and before-and-after photos.

A person who posts about a crisis needs a direct answer. A reply that points to the 988 Suicide and Crisis Lifeline, or to 911 in an emergency, keeps clinical care out of the thread. Neither app is a place to give individual medical advice.

Questions to ask before your practice posts on Threads or Bluesky

Who owns the Instagram or Facebook account that Threads is tied to, and who holds the login if that person leaves?
Are our Meta campaigns already placing ads in the Threads feed, and did we decide that on purpose?
Does our ad copy describe the service, or does it imply the reader has a condition?
If an ad promotes cosmetic or weight loss services, is it targeted to people 18 and older?
Have we set our website domain as our Bluesky handle?
Do staff who post about the practice disclose that they work here?
Who answers replies and DMs, and what is the script for a patient who mentions their care?
Is the Threads interoperable sharing setting on or off, and did we choose it knowingly?
What do we do if a post is labeled, hidden or removed, and who files the appeal within the deadline?

Use and avoid

Use: a practice account that the practice controls, with two people who can log in.
Use: your website domain as your Bluesky handle.
Use: general health information with a source, office news and staff introductions.
Use: ad copy that describes the service, not the reader’s condition.
Use: a plain disclosure when staff post about their employer.
Avoid: patient photos, case stories or replies that confirm someone is a patient without written authorization.
Avoid: answering clinical questions in replies or direct messages.
Avoid: cure claims and promises of results by a date in posts and ads.
Avoid: buying followers, engagement swaps or fake accounts.

An illustration

This example is invented. [Practice name], an integrative medicine practice in [city], decides to post three times a week on Threads and Bluesky. The first plan has the office manager run Threads from their personal Instagram login, a provider answer health questions in replies and DMs, and the practice’s Meta ads keep their default placements.

Before launch, the owner reviews the plan with their marketing contact. Threads moves to a practice Instagram account with two admins. The Bluesky account takes the practice’s domain as its handle. Replies follow a script that thanks the person, gives no advice about their care and invites them to call the office, and a crisis message gets a reply pointing to 988 or 911. The provider adds “I work at [practice name]” to their personal bio before posting about the practice. The ad team checks the placement breakdown, finds ads running in the Threads feed, and rewrites one line that asked readers whether they were “tired of your fatigue” so it describes the visit instead.

Checklist

Put Threads on a practice-owned Instagram account with at least two admins.
Set your website domain as your Bluesky handle.
Decide on the Threads interoperable sharing setting and write the decision down.
Check Meta placement breakdowns for Threads delivery, and choose placements on purpose.
Review ad copy against Meta’s Health and Wellness and Personal Attributes standards.
Target cosmetic and weight loss ads to people 18 and older.
Add a disclosure rule for staff who post about the practice.
Write a reply script that keeps patient care out of public threads and DMs.
Get written HIPAA authorization before posting any patient story, photo or case.
Note the two-week appeal window on Bluesky and who files appeals.
Keep dated records of posts, ads and approvals.

How we help

We build websites, local and organic search, Google Ads and lead generation and an AI front desk for independent practices. For Threads and Bluesky, that means setting up practice-owned accounts linked to your website, writing posts and ad copy that describe your services without implying anything about the reader’s health, checking where Meta places your ads and drafting the reply rules your staff follow. Our tools are built with HIPAA in mind. We confirm in writing what a BAA covers before any patient information flows through a tool, and if it is not covered, we do not route patient information through it. We are not a healthcare provider and we do not give legal or medical advice. Read our guide to healthcare marketing rules for the wider picture.

Can a medical practice advertise on Threads?

Meta’s May 2025 developer post says ads appear in the Threads home feed as part of Meta campaigns, and that standalone Threads campaigns were not supported at the time. Meta’s Advertising Standards, including Health and Wellness and Privacy Violations and Personal Attributes, apply to those ads. Check the current placement options in Ads Manager.

Does Bluesky sell ads?

None of the Bluesky pages we read on November 1, 2026 describes a self-serve ad product, and its Privacy Policy says it does not sell or share personal data for targeted advertising. Its Community Guidelines also require that any commercial or sponsored content be clearly identified.

Can we answer patient questions in Bluesky or Threads messages?

We recommend against it. Bluesky’s Privacy Policy says direct messages are unencrypted and can be accessed for Trust and Safety purposes, and a reply about a person’s care can disclose protected health information under HIPAA. Move the conversation to a phone call or your practice’s own secure channel.

Do staff need to disclose that they work at the practice?

Under 16 CFR 255.5(a), a business relationship the audience would not reasonably expect must be disclosed clearly and conspicuously when the person endorses the business. Bluesky’s Community Guidelines separately bar undisclosed commercial content.

If we delete a post, is it gone?

Not necessarily. The Threads Terms of Use say deletion can take up to 90 days plus up to 90 more for backups, and that content shared through interoperable capabilities may remain on third-party servers. Bluesky’s Terms of Service say complete deletion across the network may not be possible.

Threads and Bluesky for medical practices: platform rules, ads and patient privacy