A new patient finds your practice on Google, taps the ad, picks a Tuesday slot and types "knee pain after a fall" into the reason-for-visit box. Two things now try to happen at once. Google Ads wants to learn that a booking happened, so it can find more people like this one. And every piece of tracking code on that page is quietly asking whether it can take the rest of the story along with it.
Only the first one belongs in your account. So tracking comes first here, ahead of any keyword list. A medical practice has to feed Google enough to learn from while keeping the patient's reasons in the building, and most tracking tutorials were written for businesses that sell shoes.
A Page View Counted as a Patient Teaches Google to Find Browsers
Conversion tracking keeps score, and it also steers. Smart Bidding treats every conversion as a portrait of the person you want, then goes looking for lookalikes in the auction. Count the wrong thing and Google gets very good, very fast, at finding the wrong people.
The classic mistake is counting a page view: someone reached the "Contact Us" page, so the account logs a win. That's like training a new front desk hire by applauding everyone who walks past the window. Before long the account is full of people who looked around, and your schedule still has open Tuesdays.
The method in this guide runs on two campaigns with names we use at BrandRocket. Isolation is exact match with manual bids, protecting the searches you already know turn into patients. Exploration comes later: broad match paired with a target cost per patient, switched on once the account logs roughly 30 genuine bookings each month. Exploration can only learn from what you count, so the counting comes first.
Five of 14 Practices We Checked Send Patients to Another Company's Website to Book
To see how practices actually take bookings, we profiled 14 Google Search advertisers in one example market, San Diego, each verified as running Search ads in the past three months. They span primary care, concierge medicine, cardiology, gastroenterology, allergy, pain management, psychiatry, therapy, physical therapy, men's health, LASIK, urgent care and one large health system. The names in your market will differ. The booking paths will look familiar.
- Five hand the patient to another company's website. A primary care group books through Zocdoc. An allergy practice sends every "Book" button to Klara. An urgent care franchise uses Solv for check-in. A men's health clinic books through TidyCal and takes payment through Stripe. A cash-pay physical therapy practice uses HubSpot meetings and a separate therapy scheduling platform.
- Six use a request form on their own site, and the office follows up to set the time.
- Two book in real time on their own site: a telehealth network's matching flow and a LASIK center's consultation calendar.
- One, the health system, still asks most new patients to call.
When the booking finishes on someone else's website, your conversion tag never sees the confirmation. You have three options, in this order:
- Ask the scheduling vendor what it can report back. Some schedulers can fire a Google Ads conversion or send a booking signal to your tag manager. Ask exactly what data goes with it, and get the answer in writing.
- Link the two sites with Google Analytics cross-domain measurement, which carries the visitor's ID across in a `_gl` parameter so one visit stays one visit. It only works when you can place your own tag on both domains, which most marketplace schedulers won't allow.
- If neither works, count the click to the scheduler as a secondary action for reporting, and let calls and on-site forms carry the primary signal until you can measure the finished booking.
The Court Ruling Freed Your Condition Pages, Not Your Booking Form
The federal health department (HHS) warned HIPAA-covered practices about tracking pixels in a late-2022 bulletin and reissued a revised version in spring 2024. On June 20, 2024, a federal court in Texas, in American Hospital Association v. Becerra, vacated one piece of it: the idea that HIPAA kicks in when a tracker connects a visitor's IP address with a visit to a public page about a condition or a provider. Plenty of marketers read the headline and relaxed.
Read the rest of the HHS page. It still says:
- Tracking on pages where patients log in "generally" has access to protected health information. Patient portals are covered.
- A booking tool or symptom checker with no login can still pick up protected information, HHS says, especially once the patient types or picks the reason they need care.
- A cookie banner asking visitors to accept tracking is not a valid HIPAA authorization.
- Every tracking vendor that receives protected health information needs a signed business associate agreement (BAA) first.
Some practices sit outside HIPAA altogether, such as a cash-only telehealth program or a membership practice that never bills insurance. They answer to the Federal Trade Commission instead, whose Health Breach Notification Rule has explicitly covered health websites and apps since July 29, 2024. The FTC has already made the point with money. GoodRx paid a $1.5 million civil penalty after sharing health data with advertising platforms and never reporting it. BetterHelp agreed to pay $7.8 million after using the fact that people had been in therapy to find lookalike customers. Cerebral's order ran to about $7 million after it passed data on nearly 3.2 million people through tracking tools.
Google Won't Sign a HIPAA Agreement for Analytics. Build Your Tags Like It Never Will.
Google says it plainly on its HIPAA page for Google Analytics: "Google makes no representations that Google Analytics satisfies HIPAA requirements and does not offer Business Associate Agreements in connection with this service." It adds that pages behind a login are likely covered by HIPAA, that public pages "related to the provision of health care services" are "more likely to be HIPAA-covered," and that covered practices should keep Analytics tags off covered pages and work with their lawyers to sort out which pages are which.
Google has told you where it stands. Build every piece of the setup around that answer:
- Let the conversion fire on a bland confirmation page. `/thank-you` works. `/thank-you?reason=knee-pain` broadcasts the reason to every tag that loads.
- Keep condition words out of event names and URLs. An event called "anxiety_intake_submitted" says more than a booking should.
- Nothing on the page should read form fields. That includes chat widgets and "helpful" automatic form capture.
- Put every tag in one Google Tag Manager container you can open and audit, and use Tag Assistant to watch what actually fires, page by page.
The same caution applies to the names you give conversion actions. Chapter 14 splits a multi-specialty account into one campaign per service line, and each line needs its own conversion. A plain code such as "Booking 1" and "Booking 2" carries the same signal to Google as "Psychiatry booking" without the label. Let your counsel decide whether the label is worth it.
Google Wrote Health Bookings Out of Enhanced Conversions Itself
Almost every tracking checklist on the internet says to switch on enhanced conversions. The feature scrambles a customer's email address or phone number into a hashed code and sends it to Google to improve matching. For a retailer, it's free accuracy. For a medical practice, Google has already made the call.
Google's customer data policy puts health at the top of its sensitive list and names paying for medical services, prescription drugs and medical devices as examples. The very next line says such conversions can't feed enhanced conversions, or store sales either. A booked appointment is exactly that kind of purchase. Leave enhanced conversions off, and don't let a recommendation or a well-meaning checklist switch it back on.
Google's 60-Second Call Default Throws Away the Voicemails That Become Patients
Patients still call, and they remember when nobody picks up. Phone trouble alone drew 64 complaints across the 824 reviews we coded for this guide. Google's own call tracking handles most practices well, at no extra cost. A small phone snippet swaps your number for a Google forwarding number when someone arrives from an ad, so each call ties back to the keyword and ad behind it.
The setting to change is call length. Google counts a call as a conversion only if it lasts at least 60 seconds by default. We set it to 30. A patient who calls at 7 p.m., reaches your voicemail and leaves a callback number is a real lead, and a 60-second rule throws that call away.
Call tracking companies such as CallRail and CallTrackingMetrics exist too. They add things like separate numbers for each location or source, and CallRail sells a healthcare plan that includes a BAA. Ask any vendor for one before it touches a patient call. They're worth knowing about for a multi-location group. They aren't required to run this method.
Whatever you use, call your own site from a phone. On three of the 14 sites we checked, the number on the screen and the number the link dials are different. Sometimes that's call tracking doing its job. Sometimes it's a leftover from a redesign. The only way to know is to dial it.
Portal Logins and Bill Payments Are Patients You Already Have
A medical website is crowded with buttons for people who are already patients: log in to the portal, pay a bill, request a refill. Each one is a click, and none of them is a new patient. Sort every action into one of three piles:
- Primary (Google bids on these): a confirmed booking, a submitted appointment request, and a call over 30 seconds.
- Secondary (reported, never bid on): clicks to an outside scheduler, form downloads and email link clicks.
- Not tracked as conversions at all: portal logins, bill payments, refill requests and job applications.
Then set each primary action to count one conversion per ad click. Google's own help page frames it this way: count every sale, but "only one, unique lead per ad click." A patient who fills in the form twice is still one patient. Stretch the click-through conversion window from Google's 30-day default to 90 days for bookings, because a specialist appointment can take a while to book. Use data-driven attribution, and if the conversion settings still show the old enhanced CPC checkbox, clear it.
If the account's history is full of page views and portal logins counted as wins, start the conversion data over. You lose a few months of pretty reports, and you lose the bad habits they taught.
Every Specialty Books Differently. Give Each Service Line Its Own Conversion.
This is where a healthcare account stops looking like any other small business. The booking itself changes shape with the specialty:
- Urgent care: an online check-in for tonight, often through a vendor like Solv.
- Concierge medicine: an inquiry form that starts a conversation about a yearly membership.
- Therapy and psychiatry: a matching flow that asks about insurance before it offers a time.
- LASIK: a free consultation on a calendar, well before any surgery date.
Each of those is worth a different amount, converts at a different rate and needs its own conversion action. That's what lets Chapter 3 put a price on each specialty and lets Chapter 14 give each one its own budget and target.
Our specialty guides go deeper on the booking paths that belong to one field. The dermatology guide covers tracking dermatology bookings that finish on an outside scheduler. The med spa guide covers treating a deposit-backed booking as the conversion. The optometry guide covers separating new eye exams from contact lens reorders.
Next: Buy the Patient Who Is Ready Now
Once the account counts real bookings and keeps the reasons private, the next question is where to spend first. Someone searching for urgent care will walk in tonight. Someone searching for a therapist may read dozens of profiles before calling anyone. Chapter 2 maps those stages across specialties and shows why the first dollars go to the patient who is ready.
The guide home for Google Ads for Healthcare lists every chapter in order, from budgets and bidding to multi-specialty accounts, restricted service lines and insurance searches. When a practice hires us for Google Ads management, cleaning up what counts as a conversion is the first week's work, before any keyword research.
This chapter is general education, not legal advice. Have your own counsel review your tracking setup, vendor agreements and consent language.
