Who actually picks the category
Google's own help pages are direct about this. A business chooses its own categories "from the provided list", and the instruction to the business owner is to "use as few categories as possible to describe your overall core business." The list of possible categories is Google's, but the choice of which ones apply is the business's own, made when the profile is set up or edited, with no professional body or regulator involved in that step.
Google also states plainly what a category is meant to capture: "Select categories that complete the statement: 'This business IS a' rather than 'this business HAS a.'" A category is a self-description of what kind of business this is, in Google's own taxonomy, not a list of services and not a credential.
What a category is built to do
The stated purpose is straightforward. Google's guidance says categories "help your customers find accurate, specific results for services they're interested in", which is a search and matching function: showing the right kind of listing to someone typing the right kind of search. The guidance also warns against misusing the mechanism, telling businesses not to "use categories solely as keywords or to describe attributes of your business", and not to "use categories that pertain to other businesses that are nearby or related."
Read together, those instructions describe a system built for relevance, not for verification. The rules are there to stop a business gaming its own visibility, not to confirm that the business is qualified, licensed or regulated to do what its category says it is.
What a category does not check
Google's help page for choosing categories does not state that Google verifies, confirms or audits whether a chosen category is professionally or legally accurate. It says Google "can also detect category information from your website and from mentions about your business throughout the web", which describes an automated signal Google may use to suggest or adjust a category, not a licensing check performed by a person.
The guidance does reserve a general right to act on violations, stating that Google "reserves the right to suspend access to Business Profiles on Google or other Google Services to individuals or businesses that violate these guidelines." That is a policy-enforcement mechanism for the platform's own rules about how categories should be used, and it is a different thing from confirming that a business holding a given category is actually qualified, registered or authorised to practise as one.
None of this is a criticism of Google's system. A map product is not the right place to house professional licensing, and it has never claimed to be one. The category badge simply answers a narrower question than it looks like it does: what a business calls itself, self-selected from a list, not what it is certified to do.
Where the real verification actually happens
For an aesthetic doctor in Malaysia, the checks that do verify something are public, separate from any map listing, and take a few minutes to run. The Malaysian Medical Council register confirms whether a doctor holds full registration and a current practising certificate. Malaysia's Ministry of Health maintains a national registry of doctors registered to practise aesthetic medicine, which lists the procedures a given doctor is credentialed for. A premises registration certificate under the Private Healthcare Facilities and Services Act is meant to be displayed on site. Where lasers, HIFU or liposuction devices are involved, the device itself should carry a registration with the Medical Device Authority, and the operator a designated device permit. The full sequence, with the register to check for each one, is set out in the clinic's own guide to checking an aesthetic doctor in Malaysia.
Those checks confirm the doctor, the premises and the device. A category on a map listing confirms none of them, because it was never built to.
Reading a listing for what it actually is
None of this means a category is worthless. It is a reasonable first signal for finding the right kind of business for a search, which is the job it was designed for. The mistake is reading more into it than that, treating a self-selected label as though it were a credential someone else checked.
A badge that a business assigns to itself is still worth glancing at. It is just not the same kind of fact as a registration number that a public register can confirm or deny, and the two should never be mistaken for each other.
