Measuring Patient Acquisition Without Creating Privacy Exposure
The tension is real and it is not solved by switching analytics off. A clinic needs to know which service lines produce booked appointments, which channels waste money and where patients abandon. The problem is that the default way that data gets collected, with third-party tags firing on every page, full URLs passed to advertising platforms and form values captured by session recording tools, can carry health context alongside identifiers on pages about conditions, treatments and appointments.
A defensible setup starts by deciding what may never leave the site. Condition and provider names stripped from URLs and event parameters. Conversion events reported as generic appointment requests rather than procedure-specific goals. Server-side tagging, so what is transmitted is controlled rather than assumed. Consent captured before any non-essential tag loads. Session recording excluded from clinical and form pages entirely. None of that stops you optimizing. It stops you optimizing with data you should never have sent.
What it costs you is granularity inside the ad platforms, which is why offline conversion reporting matters more in health than almost anywhere else. Booked and attended appointments are matched back to source inside your own systems, and only aggregate, de-identified signal returns to the platforms. This shapes how we run Google Ads for clinics, and because requirements differ by jurisdiction, the configuration is built to be reviewed and approved by your counsel rather than assumed compliant.