Skip to main content
BAA Directory

Does Birdeye sign a BAA?

The answer

Signs a BAA

Yes. Birdeye's standard HIPAA Business Associate Agreement terms are part of the Master Service Agreement for covered entity customers.

Video, reviews and SMS. Checked on the vendor's own pages on .

On this page

What Birdeye says

“These Standard HIPAA Business Associate Agreement Terms and Conditions (“HIPAA Addendum”) shall be incorporated into the Master Service Agreement for Customers that are Covered Entities (as defined below) that provide Protected Health Information (“PHI”)(as defined below) to Birdeye in connection with the Birdeye For Local Business and Enterprise services they have purchased.”

Source: Birdeye, HIPAA Statement, checked .

What this means for ad tracking

Review requests and patient texting run on lists of recent patients, and teams often count web chat leads, text sign-ups or review clicks as conversions.

A BAA with Birdeye covers the patient contacts and messages Birdeye holds. It does not cover an ad platform, so a web chat lead or text sign-up you count as a conversion should reach Meta or Google as a neutral event with no message content.

Curve Compliance closes that gap: it sends the conversion itself server-side, under a BAA it signs on every plan, so your campaigns keep a conversion signal without a pixel carrying patient data. Book a call to see it on your own funnel.

How Curve helps

  • Keep Birdeye for what it does well. Curve carries the conversion signal to your ad platforms separately, under its own BAA.
  • Server-side conversion tracking in place of pixels: conversions reach your ad platforms from Curve's server, not from the patient's browser.
  • PHI-like pattern detection checks every event before it goes out, and neutral event names keep conditions and treatments out of what the platforms see.
  • Identifiers are hashed with SHA-256 to each platform's requirements.
  • Consent management for your site, alongside the tracking.
  • A HIPAA-compliant setup done by Curve's team, in about a week, with a BAA signed on every plan.

Book a call with Curve and Curve's team will walk through your tracking setup with you.

Read the full guide

For the full picture on Birdeye and patient data, read Is Birdeye HIPAA Compliant? Reviews and Patient Data.

Frequently asked questions

Does Birdeye sign a BAA?

Yes. Birdeye's standard HIPAA Business Associate Agreement terms are part of the Master Service Agreement for covered entity customers. We checked Birdeye's own pages on September 29, 2026.

Is Birdeye HIPAA compliant once the BAA is signed?

A BAA is Birdeye's commitment to protect the PHI it handles for you. How you set up Birdeye still matters, and the BAA does not reach ad platforms that receive data from your site or from Birdeye.

Does a BAA with Birdeye cover my ad pixels?

No. A BAA covers the data Birdeye handles for you. A pixel sends data from the visitor's browser straight to Meta, Google or TikTok, and none of those platforms is a party to your BAA with Birdeye.

Does Curve Compliance sign a BAA?

Yes. Curve Compliance signs a BAA on every plan, and Curve's team does the HIPAA-compliant setup in about a week. Book a call to get started.

Sources

Last checked . Vendors change their plans and terms, so confirm the current terms with Birdeye before you send it patient data.

See every tool in the BAA Directory.

Track ad conversions under a BAA

Curve signs a BAA on every plan. Curve's team sets up HIPAA-compliant conversion tracking for you in about a week, sending conversions server-side in place of pixels.

Book a call