dental practices · Privacy-First Tracking
Privacy-first ad tracking for dental practices.
Measure new patients from your ads without sending patient health information to Google or Meta.
| Week of Monday | Spend | Answered | Booked | Showed | Cost per patient |
|---|---|---|---|---|---|
| Implants | $2,000 | 31 of 38 | 9 | 7 | $286 |
| Invisalign | $1,200 | 35 of 41 | 14 | 11 | $109 |
| Emergency | $800 | 44 of 52 | 25 | 22 | $36 |
| General | $1,000 | 51 of 60 | 30 | 24 | $42 |
| All procedures | $5,000 | 161 of 191 | 78 | 64 | $78 |
Sample data. Not a client result.
What is included
- A scan of every tag on forms, booking pages and portals
- Removal of ad tags from pages that collect health details
- Server-side conversions with neutral event names
- HIPAA-eligible form and call-tracking vendors under BAA
- Offline conversion imports that use IDs only
- A written summary for your counsel to review
What the rules say, in plain English.
HHS guidance says tracking technologies on regulated entities' websites can disclose protected health information. In June 2024 a federal court vacated only the part about unauthenticated pages combined with IP addresses. The rules on authenticated pages and on disclosing PHI still apply.1
Google says do not send it PHI.
Google says it does not sign Business Associate Agreements for Google Analytics, and tells HIPAA-regulated entities not to send it protected health information or tag authenticated pages.2
Meta restricts health advertisers.
Meta now limits lead and scheduling events for many health and wellness advertisers.3 A privacy-first setup is also the setup that keeps your campaigns measurable.
Our stack keeps health details out of ad platforms.
Forms and call tracking run on HIPAA-eligible vendors under BAA. Conversions are sent server-side with neutral event names, and ad tags stay off patient portals and pages that collect health details.
We call it HIPAA-aware, never HIPAA-certified.
There is no such certification. Your own counsel should review and sign off on your setup. Nothing on this page is legal advice.
Mistakes we fix
- Meta or Google pixels on appointment request forms
- Event names like implant_consult_booked sent to ad platforms
- Session replay tools recording form fields
- Tags firing inside the patient portal
Flat fee, month to month. See what each plan includes.
Privacy-First Tracking: common questions
- Is your tracking HIPAA compliant?
- No agency can honestly promise HIPAA compliance for your whole practice. We keep PHI out of Google and Meta, use BAA-covered vendors and give you a written summary for your counsel to review.
- Is the privacy scan included in the audit?
- Yes. The free audit lists which tags fire on your forms and booking pages.
- Will privacy-first tracking hurt ad performance?
- It changes what the platforms see, not whether they learn. Server-side conversions with neutral names and PMS imports give Google clean signals about real new patients.
Related
Call tracking & front-desk grading
Keyword-level call attribution, plus answered, missed and booked outcomes.
Learn moreNew-patient reporting
Booked new patients from your PMS sent back to Google, using IDs only, so bidding chases real patients.
Learn moreFacebook & Instagram Ads
Implant seminars, Invisalign offers and new-mover campaigns, built for Meta's health-data limits.
Learn moreSee what a new patient really costs you, and whether your tracking is leaking data.
Free 15-point audit: wasted spend, procedure split, a tracking privacy check and 5 call reviews. Loom video in 3 business days.