Is SimplePractice HIPAA compliant? Does it sign a BAA?
The answer
Signs a BAA
Yes. You agree to SimplePractice's Business Associate Agreement when you create your account, and it carries over when you move to a paid plan.
Scheduling and intake. Checked on the vendor's own pages on .
Using SimplePractice on a healthcare site? Curve Compliance keeps your ad tracking HIPAA-compliant around it, under a BAA on every plan. Book a call
On this page
What SimplePractice says
“When you create your trial account, you agree to the Business Associate Agreement, the Terms of Service, and the Privacy Policy.”
“You don’t need to re-agree to or electronically sign the BAA when you upgrade from a trial to a paid account.”
What this means for ad tracking
SimplePractice runs booking, intake and records for many practices, so it usually sits right where the ad tracking happens. A pixel on a booking or intake page can send the page address, the appointment type and the visitor's identifiers to Meta, Google or TikTok.
A BAA with SimplePractice covers the patient data SimplePractice holds for you. It does not cover what an ad pixel on a SimplePractice page sends to an ad platform, because the ad platform is a separate recipient that has not signed your BAA. Meta's Business Tools Terms bar health information, so the booking has to reach Meta without it.
Curve Compliance closes that gap: it takes booking outcomes from your EHR as offline conversion uploads, credits each to the original ad click, and sends the conversion server-side under a BAA it signs on every plan. Book a call to see it on your own funnel.
A business associate agreement binds only the vendor that signs it, so each vendor that handles patient information for you needs its own. To compare schedulers, see our guide to HIPAA compliant scheduling software.
How Curve helps
- Curve Compliance carries the conversion signal to your ad platforms separately, under its own BAA, so you can keep SimplePractice for what it does well.
- Curve credits offline conversion uploads from your EHR to the original ad click.
- Curve sends conversions server-side to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn from its own servers, with neutral event names and SHA-256 hashed identifiers.
- Curve flags PHI-like patterns, such as condition names, form answers and emails in URLs, before data reaches an ad platform, so they can be stopped at the source.
- Curve signs a BAA on every plan, and Curve's team does the HIPAA-compliant setup for you in about a week.
Book a call with Curve and Curve's team will walk through your tracking setup with you.
Frequently asked questions
Does SimplePractice sign a BAA?
Yes. You agree to SimplePractice's Business Associate Agreement when you create your account, and it carries over when you move to a paid plan. In SimplePractice's words: “When you create your trial account, you agree to the Business Associate Agreement, the Terms of Service, and the Privacy Policy.” We checked SimplePractice's own pages on October 1, 2026.
Is SimplePractice HIPAA compliant once the BAA is signed?
A BAA is SimplePractice's commitment to protect the PHI it handles for you. How you set up SimplePractice still matters, and the BAA does not reach ad platforms that receive data from your site or from SimplePractice.
Does a BAA with SimplePractice cover my ad pixels?
No. A BAA covers the data SimplePractice handles for you. A pixel sends data from the visitor's browser straight to Meta, Google or TikTok, and none of those platforms is a party to your BAA with SimplePractice.
Does Curve Compliance sign a BAA?
Yes. Curve Compliance signs a BAA on every plan, and Curve's team does the HIPAA-compliant setup in about a week. Book a call to get started.
Sources
Last checked . Vendors change their plans and terms, so confirm the current terms with SimplePractice before you send it patient data.
Related tools
- Does Healthie sign a BAA?Signs a BAA. Entered into when your account is created.
- Does Tebra sign a BAA?Signs a BAA. Part of the Terms of Service for covered entities.
- Does IntakeQ sign a BAA?Signs a BAA. Signed in the account by the admin.
- Does Jane App sign a BAA?Signs a BAA. BAA arranged with Jane.
- Does Meta sign a BAA?Does not sign a BAA. Business Tools Terms bar health information.
- Does Google Ads sign a BAA?Does not sign a BAA. Google Ads call terms disclaim HIPAA.
Track ad conversions under a BAA
Curve signs a BAA on every plan. Curve's team sets up HIPAA-compliant conversion tracking for you in about a week, sending conversions server-side in place of pixels.
Book a call