Answers · Updated 2026-09-04

How do you track Google Ads conversions for a practice without violating HIPAA?

Server side. The form posts to a BAA covered system, and that system tells the ad platform a conversion happened with a click identifier and nothing about the person. No pixel fires on the thank you page.

You still get cost per booked consultation by campaign. What you give up is remarketing lists built from patients, which you should not have anyway. Call tracking follows the same rule: a vendor under BAA and spoken consent before recording.

Answered by George Stoff, Founder and Lead Engineer