HIPAA Ad Tracking Guides for Healthcare Marketers
Curve Compliance's guides, grouped by topic: Meta and Google Ads rules for health advertisers, fixes for ad account notices, which tools sign a BAA, what counts as PHI, the HIPAA rules, forms and intake, analytics, AI search, specialties, and the laws and lawsuits behind them.
Book a call- Implement in days, not weeks
- Scale Google and Meta ads
- No engineering team required
- HIPAA Compliant
- SOC 2 Type II
- US Hosted
Meta ads and health data
Meta's rules for health advertisers, and how to keep measuring conversions under them.
- Meta healthcare ad rules in 2026: 3 limits and how to adapt
- Meta Business Tools Terms: what they say about health data
- Is the Meta Pixel HIPAA compliant?
- How to make Facebook ads HIPAA compliant and keep tracking
- Facebook Custom Audiences for healthcare: compliance checklist
- Facebook and Instagram health condition advertising: 2026 guidelines
- Facebook Lead Ads to a patient CRM: a safe route
- HIPAA-Compliant Meta Pixel Alternative for Healthcare
- How to Remove the Meta Pixel From a Healthcare Website
- Meta Pixel on a Pharmacy Website: What Meta Restricts
- Meta CAPI Parameter Builder on Health Sites: What It Sends
- Meta On-Device Conversion Measurement for Health Sites
- Meta Ads Data Advisor on a Healthcare Website: What to Know
- Meta Business AI for Clinics: What the Terms Say
Google Ads
Google's health policies, enhanced conversions, audiences and campaign structure for healthcare.
- HIPAA-compliant Google Ads: the 2026 guide for healthcare
- Enhanced conversions for healthcare: setup without PHI
- Google Ads audience segments for healthcare: which are safe
- Performance Max campaigns for healthcare: structure guide
- HIPAA call tracking for Google Ads: medical practice guide
- GTM server-side container for healthcare: setup guide
- Healthcare Ads in Google AI Mode and AI Overviews
- Google AI Calling Your Clinic: Bookings and Call Tracking
ChatGPT, Microsoft, TikTok, LinkedIn, Reddit and Amazon ads
Policies and conversion tracking on the other ad platforms health brands use.
- ChatGPT ads for health brands: tracking and policy
- Microsoft Ads for healthcare: compliance and campaign setup
- Microsoft UET tag and HIPAA: PHI-safe Bing conversions
- TikTok and GLP-1 ads: other platforms for weight loss clinics
- LinkedIn healthcare marketing: B2B and ABM compliance
- Reddit ads for healthcare: compliant targeting
- Amazon Ads for health brands: PHI-safe conversions
- Microsoft Copilot Ads for Healthcare: Rules and Tracking
- ChatGPT Ads for Dental Practices: Eligibility and Tracking
- Healthcare Ads in AI Assistants: 2026 Platform Rules
Ad account rescue
What a Meta, Google, TikTok, Microsoft or ChatGPT ads notice means for a clinic, and what to fix.
Ad Account Rescue: every notice, by platform
- Meta personal attributes rejection: rewriting clinic ads
- Data sharing restrictions applied in Meta: what it means
- Meta restricted purchase events for health and wellness
- Your business portfolio is restricted from advertising
- Google Ads personalized advertising policy: health audiences
- ChatGPT ad not serving for your clinic? Policy and fixes
BAAs and "Is it HIPAA compliant?"
Which marketing, analytics and AI tools sign a Business Associate Agreement, and on which plans.
BAA Directory: which tools sign a BAA
- What is a Business Associate Agreement? HIPAA BAA guide
- Does Meta sign a BAA?
- HIPAA compliant AI tools: which ones sign a BAA
- HIPAA-compliant CRM: which CRMs sign a BAA
- HIPAA compliant scheduling software: BAAs and ad attribution
- Is Microsoft Clarity HIPAA compliant?
- Is GoHighLevel HIPAA compliant?
- Is Stripe HIPAA compliant?
- Which Ad Platforms Sign a BAA? Meta, Google, TikTok, More
- HIPAA BAA Template: Sample Business Associate Agreement
HIPAA compliant software
Which practice software, telehealth, messaging, email, hosting and phone tools sign a BAA.
HIPAA compliant software list: tools that sign a BAA
- HIPAA Compliant Cloud Storage: Which Providers Sign a BAA
- Zoom vs Google Meet vs Teams: Which Sign a HIPAA BAA?
- HIPAA Compliant Practice Management Software: BAAs
- HIPAA Compliant Telehealth Platforms: Which Sign a BAA
- HIPAA Compliant Texting: Which Messaging Apps Sign a BAA
- HIPAA Compliant Chatbots: Which Chat Tools Sign a BAA
- HIPAA Compliant Email Providers: Who Signs a BAA
- HIPAA Compliant Website Hosting: Which Hosts Sign a BAA
- HIPAA Compliant Phone Systems and VoIP: Who Signs a BAA
- HIPAA Compliant Fax Services: Which Sign a BAA
- HIPAA Compliant Therapy Platforms: Which Sign a BAA
- HIPAA Compliant E-Signature Tools: Which Sign a BAA
- HIPAA Compliant Survey Tools: Which Sign a BAA
HIPAA and tracking basics
What counts as PHI on a website, and how server-side tracking and consent fit in.
HIPAA marketing glossary: 46 ad tracking terms, defined
- What counts as PHI on a website?
- Are IP addresses PHI under HIPAA?
- Is a hashed email PHI?
- Is a cookie banner enough for HIPAA compliance?
- Does HIPAA apply to med spas?
- Conversion API for healthcare: HIPAA architecture explained
- Is server-side tracking HIPAA compliant? Not by itself
- Consent management platforms for healthcare
- PHI Meaning: What Does PHI Stand For in Healthcare?
- Examples of PHI: Is It PHI? 30 Data Types Answered
- 18 HIPAA Identifiers: How Each Shows Up in Website Data
- What Is ePHI? Electronic PHI and the Security Rule
- PHI vs PII: What Healthcare Marketers Need to Know
- Is a Phone Number PHI? HIPAA Rules for Call Data
- Is an Email Address PHI? When Email Counts Under HIPAA
- Is Date of Birth PHI? Age, Dates and HIPAA Explained
- Is a ZIP Code PHI? Addresses and Location Under HIPAA
- Are UTM Parameters PHI? A HIPAA Guide for Clinic Ads
- What Is a Tracking Pixel? What It Means on a Health Site
- Do YouTube and Google Maps Embeds Share Patient Data?
HIPAA rules explained
The HIPAA rules behind website tracking: who they cover, what they require and who enforces them.
- HIPAA Rules: The 5 Main Rules Explained for Marketers
- New HIPAA Rules 2026: What Is Final, Proposed and Pending
- What Is the HITECH Act? What It Changed in HIPAA
- What Is a HIPAA Covered Entity? The 3 Types, Explained
- What Is a Business Associate Under HIPAA? With Examples
- HIPAA TPO: Treatment, Payment and Health Care Operations
- Notice of Privacy Practices: HIPAA Rules and Your Website
- HIPAA Minimum Necessary Rule: What It Means for Ad Tracking
- HIPAA Marketing Authorization and Ad Tracking Explained
- HIPAA Breach Notification Rule: Deadlines and Examples
- HIPAA Violation Examples: Real Cases, Including Tracking
- Who Enforces HIPAA? OCR, State AGs and the DOJ
- Does HIPAA Preempt State Law? When State Privacy Laws Win
- HIPAA Network Map for Marketing Tools: Security Rule 2027
Analytics, session replay and heatmaps
Website analytics for healthcare, and what makes session replay and heatmaps safe to run.
- HIPAA-compliant analytics: 10 tools and their BAA terms
- Is Google Analytics HIPAA compliant?
- HIPAA compliant session replay and heatmap tools
- What makes session replay HIPAA compliant
- Session replay and heatmaps under the same BAA
- Best HIPAA-Compliant Server-Side Tracking Tools (2026)
- HIPAA Compliant CDP: What Healthcare Marketers Need
- Segment Alternatives for Healthcare: BAAs Compared
- Piwik PRO Alternatives for Healthcare Ad Tracking
- PostHog vs Freshpaint for Healthcare: BAA and Alternatives
- Hyros vs Triple Whale vs Northbeam for Telehealth
- Patient Journey Mapping: From Ad Click to Booked Visit
- Safari 27 and Clinic Ad Tracking: What Still Works
Forms and intake
Lead forms, intake forms and form builders, and how to keep health details out of ad platforms.
Laws, lawsuits and regulators
HHS guidance, FTC actions, pixel lawsuits, state health privacy laws and the dates coming up.
- The HHS tracking bulletin, annotated after AHA v. Becerra
- Meta Pixel lawsuit tracker: healthcare settlements
- Pixel settlements to date: a running reference
- FTC health privacy actions: a reference list
- Meta Pixel and Conversions API in the FTC's Hims case
- State health privacy laws: a reference table
- DTC pharma advertising in 2026: FDA and FTC rule changes
- Oklahoma and Louisiana Privacy Laws 2027: Health Marketing
- CCPA ADMT Rules and Telehealth Eligibility Quizzes
- VPPA and Health Websites: Video Pages, Pixels and Salazar
- Global Privacy Control (GPC): What Clinic Sites Must Honor
- DEA Telemedicine Rule 2027: What It Means for Telehealth Ads
- LegitScript Certification: Who Needs It to Run Health Ads
- Healthcare Marketing Compliance Calendar 2027: Key Dates
- Health Marketing Compliance News: October 2026
- Healthcare Marketing Trends for 2027: Privacy, AI, Ads
By specialty
Ad rules and tracking for specific kinds of practice. Each solutions page shows how Curve Compliance works for that specialty.
- GLP-1 ads: what Google and Meta allow in late 2026
- Facebook ads for med spas
- Fertility clinic Facebook ads: sensitive topic targeting
- Google Ads for TRT clinics: testosterone ad rules
- Dental marketing compliance checklist
- Telehealth
- Weight loss and GLP-1 clinics
- Men's health, TRT and ED clinics
- Fertility and IVF clinics
- Addiction treatment centers
- Mental health
- Med spas
- Plastic surgeons
- DSO and dental
- Marketing agencies
- Best HIPAA-Compliant Conversion Tracking for TRT Clinics
- Best HIPAA-Compliant Conversion Tracking for Urgent Care
- Best HIPAA-Compliant Conversion Tracking for Plastic Surgery
- Best HIPAA-Compliant Tracking for Addiction Treatment
AI assistants, AI search and MCP
Ads and bookings inside AI assistants, AI crawlers, and connecting AI tools to ad accounts without sending health data.
- Meta Ads MCP for clinics: a read-only setup guide
- Is the Meta Ads MCP HIPAA compliant?
- Claude and Google Ads for clinics: a PHI-safe MCP setup
- What makes an MCP server HIPAA-safe: a checklist
- AI Agents Booking Appointments: Tracking and HIPAA
- AI Receptionists and Scheduling Agents: Ad Attribution
- In-Chat Checkout for Health Brands: Tracking Sales
- AI Crawlers on Healthcare Websites: What to Allow
Comparisons and free tools
How Curve Compliance compares with other tools, and free checks you can run on your own site.
Every guide and article
The full library is listed newest first on the guides archive, and news and announcements are under articles. To see what your own site sends to ad platforms, run the free scan or book a call with Curve's team.
Talk to Curve Compliance
See what your site sends today and how Curve's team would set up HIPAA-compliant ad tracking for you, with a BAA on every plan.
- Signed BAA included
- Live in ~7 days
- No engineering lift