Something broke. That's usually why you're reading this. Nobody searches "Prospyr alternative" for fun. Whatever the trigger was, it landed in one of four places: scheduling, charting, payments, or compliance.
We're not going to hand you a feature-by-feature teardown of Prospyr against Lumè. That requires verified pricing and a real account of what's in their product on any given day, and we're not faking precision we don't have. What we can give you is the set of questions that actually separate these tools. Ask them of anyone on your shortlist.
Ignore the Ranking — Keep the Shortlist
Most top 10 medspa CRM lists are advertising: placement correlates with referral fees, not fit. Use them to build a shortlist. Then throw away the order they put you in and judge on your own daily workflow.
The right CRM for a solo nurse injector running one room is rarely the right CRM for a five-location group. A list that puts the same product at #1 for both is optimizing for something other than your practice.
Five Questions That Actually Separate These Tools
Skip the feature checklist. Everyone claims "scheduling" and "HIPAA compliant" somewhere on the page. Ask these instead.
Is HIPAA architecture and a BAA included at the base tier, or upsold as an enterprise add-on? This is the fastest way to find out how seriously a vendor takes PHI. If compliance shows up only on the top plan, ask why the cheaper tiers are allowed to handle client health information without it.
Does scheduling, charting, consent, payments, and messaging live on one client record, or in bolted-together modules? A lot of platforms sell you the calendar, then sell you charting as a separate add-on. Ask whether a booking, a consent signature, and a payment actually land on the same record — or whether you're stitching modules together yourself.
Does the platform support memberships and packages with rollover or banked credits? Injectable-heavy practices live on repeat visits. If the system can't track banked units or draw down a package balance automatically, you're doing that math by hand.
What retention automations exist for rebooking and lapsed-client win-backs? A CRM that doesn't automate rebooking prompts and win-backs is asking your front desk to remember to do it manually, every time.
What's the total cost once add-ons are counted — not the advertised starting price? Medspa CRMs run from around $100 a month for a single-location starter tier to $600 or more for multi-location plans with AI and marketing built in. Standalone add-ons stack on top of that: Podium, for instance, runs roughly $400–$600 a month on its own. Ask for the number with everything included.
Where We Set the Floor
Our answer to the first question: a Business Associate Agreement is in the standard contract at every tier we sell. Tenant data is isolated at the database level. Every PHI read hits an append-only audit log. Everything is encrypted in transit and at rest. None of it is gated behind an "enterprise" plan.
We say this out loud even though most competitors won't: if compliance is a paid tier, the base product doesn't have it. HIPAA and a BAA should be the floor every customer stands on, not an upgrade you chase once you're big enough to afford it.
Seven Jobs, One Record
This is the bolted-together-modules problem solved the other way. Provider-column calendars with drag-to-reschedule and buffer time. A public booking page that captures a deposit. Treatment history with provider notes and before/after photos, dosages and lot numbers where relevant. Versioned e-signed consent, auto-sent on booking and stored on the chart. Card, cash, and check payments posted straight to the invoice, with a receipt and refund trail. Membership and package balances that draw down automatically. All of it on one client record.
When a client reschedules a filler appointment, the deposit, the consent version they signed, and their remaining package balance are sitting on the same page — not three tabs and a spreadsheet.
The AI SMS Agent — and What It Doesn't Do
Included in the Pro tier at $249 a month, alongside the full medspa CRM, is an AI agent that answers inbound texts and books against your real schedule. It reads live availability, staff schedules, and provider service eligibility through structured, audited tool calls.
The system prompt is PHI-free by design. Before any outbound message sends, a pattern scan checks for SSNs, dates of birth, and payment card numbers. A match blocks the send and escalates to a human immediately. Staff can pause the agent per-conversation from the inbox. There's a daily send cap. Anything clinical or payment-related routes to a person.
It doesn't replace a deposit as the strongest lever against no-shows. That's still the deposit, by a wide margin. The agent's job is narrower: keep booking logistics moving over text.
The Sizing Mistake That Costs the Most
Buying up or down a size is the most common and most expensive mistake in choosing a CRM. We built Lumè for solo nurse injectors, single-location spas, and small multi-location groups adding providers and rooms — not for a large enterprise chain. That's Zenoti's lane, not ours, and we'd rather say so than sell you a size you don't need.
What to Ask For Next
Ask any vendor, us included, to walk your actual daily sequence — booking to consent to payment to rebooking — not a feature checklist read off a slide. Five minutes watching one appointment move through a single record tells you more than a demo full of disconnected screens.
Compare total cost, not the sticker. Price out the tier you'd actually need, including the $249-a-month Pro tier if the AI SMS agent matters to your front desk.