There are two ways onto page one. Most practices are only trying for one.
When someone searches "botox near me," Google doesn't return one list. It returns two — the map results, and below them the ordinary web results. They're ranked by completely different systems, and your website only competes in the second one.
Your Google Business Profile is the other slot. It sits higher on the page, it's judged on signals you control directly, and for most independent med spas it's sitting half-built.