Ask a spa owner or a clinic manager what their business is worth, and most will point to a room, a chair, a list of practitioners, a lease. The honest answer is quieter and more valuable than any of those: it is the relationship with the people who book, return and pay. That relationship is the asset. And a surprising number of wellness businesses do not actually own it. They rent it back, month after month, from the software vendor that holds the bookings, the client records and the card details.
What “renting the relationship” actually means
When your calendar, your client history and your payments all live inside someone else’s platform, you are a tenant. The vendor sets the rent, and the rent tends to move in one direction. Fees are re-priced on their schedule, not yours. Features you built a workflow around get bundled into a higher tier. Terms of service change, and your notice period is however long they choose to give you. None of this is villainy; it is simply the logic of the arrangement. When the substrate under your business belongs to someone else, the pricing power belongs to them too.
The sharper edge is de-platforming. Accounts get suspended for reasons that range from a genuine policy breach to a billing dispute to an automated flag no human reviewed. If your entire client list, your appointment calendar and your revenue engine sit behind that account, a suspension is not an inconvenience — it is your business going dark with your customers on the other side of a wall you cannot open.
Why health data raises the stakes
Wellness businesses hold unusually sensitive information. Under the GDPR, health-related data is treated as a “special category” under Article 9, carrying a higher bar for lawful processing and protection than an ordinary mailing list. That is not a footnote. It means the records you keep — intake forms, treatment notes, anything that touches a person’s health — sit under stricter obligations, and those obligations follow the data wherever it is processed.
Location is not the same as control. Under the US CLOUD Act, US authorities can compel a US-owned cloud provider to hand over data even when the servers physically sit in the EU. According to the European DIGITAL SME Alliance and n-ix, three US firms hold roughly 65% of the European cloud market. So the reassuring line “our data is hosted in Europe” can be true and still incomplete: where the data lives is not the same question as who can reach it. For a business holding special-category health records, that gap is worth understanding before it becomes a problem.
Owning the data and the channel
The alternative is not to abandon software — it is to own the software’s foundation. A self-hosted platform keeps the client data, the customer relationship and the billing inside your own environment and your own jurisdiction, rather than as a tenant on infrastructure you don’t govern. You still run bookings, memberships, a shop, content, payments. The difference is that no one else holds the master key, sets your rent, or can switch you off.
This is the design principle behind VBWD, a source-available, self-hosted SDK. One Python backend core drives a Vue/TypeScript web front end plus native iOS and Android SDKs, so a wellness business can meet clients on web, iPhone and Android without commissioning three separate builds. Its core is deliberately agnostic, with capabilities — booking and scheduling, payments, subscriptions and memberships, catalogue, CMS, chat — arriving as plugins you toggle on or off, no restart required. Because it is source-available under BSL 1.1, it is free for commercial use while annual VBWD-attributable sales stay below the value of 6.7 BTC per year. The point is not the feature list; it is that the list runs on ground you stand on. For a fuller version of this argument, VBWD’s own write-up on sovereign-by-default commerce is a reasonable next read, as is its architecture overview.
The honest caveat
Owning your substrate is not free, and it is not automatically the right call. Self-hosting shifts responsibility onto you: someone has to keep the system patched, backed up and secure, whether that is a small internal capability or a studio you hire. A managed SaaS genuinely removes that operational weight, and for a solo practitioner with a handful of weekly bookings, renting may be the sensible trade for years. Ownership matters most when the relationship you are renting has become the core of your value — when the client list, not the lease, is the business. Only you can judge where that line sits for your practice.
If your practice is wrestling with any of this — the vendor whose fees keep climbing, the client data you’re not sure you truly control, the account you’d rather not depend on staying open — the useful next step is concrete: see it running for your own business. Request an enterprise installation and bring the numbers you want to improve.
Sources: GDPR Article 9 (special-category health data); US CLOUD Act and European cloud market concentration via the European DIGITAL SME Alliance and n-ix.
