Patient Journey Mapping: From Ad Click to Booked Visit

A patient journey map lays out each step from the first ad or search to a booked and attended visit, with the patient's question, the channel and one measurable event at each stage, and it is the base for choosing patient acquisition strategies that work. For marketers, the useful version ties every stage to a neutral event that an ad platform can receive without PHI. Curve Compliance shows a single prospect's journey from ad click to booking, strips PHI before data reaches an ad platform, and sends conversions server-side under a BAA it signs on every plan.

Book a call. Want to see which ads turn into booked visits without sending patient details to Meta or Google? Curve Compliance credits each booking to the original ad click, strips PHI before data reaches an ad platform, and signs a BAA on every plan. Book a call with Curve.

What a patient journey map is

A patient journey map is a picture of what one kind of patient does and asks, from the moment a need appears to the visit and beyond. The Agency for Healthcare Research and Quality lists journey mapping among the ways to learn about patient experience: "There are many ways to gather information on patient experience, such as through not only CAHPS surveys, but also rapid-cycle surveys, focus groups, observation, journey mapping, and patient & family advisory councils" (AHRQ).

A marketing journey map adds one column: the event that proves each step happened. That makes the map measurable, and it is where healthcare marketers need the most care, because the service someone wanted or the reason for a visit must not reach an ad platform.

A funnel and a journey map describe the same path from two angles. A funnel counts how many people reach each stage; a journey map explains what each person is trying to do there. For the funnel view, see the HIPAA-compliant healthcare marketing funnel.

The stages of the patient journey

The map below uses six stages. The event names follow the pattern Curve's tracking plan builder uses: a descriptive label kept inside your own tools, and a neutral alias such as event_1 for every ad platform, numbered in funnel order.

Stage	The patient's question	Common channels	Event to measure	Keep out of ad platforms
Awareness	Is there help for this, and who offers it?	Search ads, paid social, local search, referrals	The ad click, with its click ID kept for later credit	Condition or treatment names in landing page URLs and UTM values
Consideration	Is this the right clinic for me?	Service pages, location pages, reviews	Visits to key pages, kept in your own analytics	Page titles and paths that name a condition or treatment
Lead or intake	Can I ask a question or check if I qualify?	Forms, quizzes, calls, chat	Lead submitted, sent as event_1	Form, quiz and intake answers, and anything typed into a free-text field
Booking	When can I be seen?	Online booking tools, phone	Appointment booked, sent as event_2	Appointment type, visit reason, the service booked
Visit	Was the visit worth it?	The clinic	Visit completed, from your CRM or EHR, sent as event_3	Anything from the visit or the record
Retention	Should I come back, or tell a friend?	Reminders, follow-up, reviews	Return visit or renewal, from your CRM or EHR	Treatment details and anything clinical

Map one service and one kind of patient at a time. A new-patient dental exam and a course of physical therapy follow different paths, so each gets its own map.

Patient acquisition strategies by stage

Patient acquisition strategies are the ways a practice brings in new patients. The journey map shows where each one fits and which event proves it worked.

• Search ads for people already looking. Judge them on bookings and attended visits, not clicks, so the platform learns from the people who became patients.
• Paid social for people who are not searching yet. Optimize on a neutral lead or booking event. Meta's Business Tools Terms say the names you choose for events and conversions "must not reflect, imply or be based on" the sensitive categories they list, which include health information (Meta).
• Local search, reviews and referrals. These carry no ad click ID, so ask each new patient how they heard about you and record the answer in your CRM.
• Landing pages that match the ad. An ad for a service should land on a page about that service, with a clear way to book. The page can name the service; the URLs and titles your tracking sends to ad platforms should not.
• Booking that is one click away. Link booking from every service page, and keep the ad click attached when the visitor moves to a separate booking tool, so the booking is credited to the ad that earned it.
• Lead follow-up. Route form and call leads to your team as they arrive, and track which leads become bookings, so you can judge each channel on patients rather than inquiries.
• Retention and recall. Measure return visits from your CRM or EHR. Before you use patient information for marketing, check whether HIPAA requires the patient's authorization; see HIPAA marketing authorization and ad tracking.

Where the patient journey leaks PHI

HHS says "Regulated entities are not permitted to use tracking technologies in a manner that would result in impermissible disclosures" of PHI to tracking technology vendors, and gives examples that sit right on this map (HHS):

• Booking and symptom pages. "Tracking technologies on a regulated entity's unauthenticated webpage that permits individuals to schedule appointments or use a symptom-checker tool without entering credentials may have access to PHI in certain circumstances."
• What people type or pick. Tracking "might collect an individual's email address, or reason for seeking health care typed or selected by an individual" when someone makes an appointment or enters symptoms.
• Marketing use. "disclosures of PHI to tracking technology vendors for marketing purposes, without individuals' HIPAA-compliant authorizations, would constitute impermissible disclosures."

A banner on the same HHS page says: "On June 20, 2024, the U.S. District Court for the Northern District of Texas issued an order declaring unlawful and vacating a portion of this guidance document." The court vacated the guidance "to the extent it provides that HIPAA obligations are triggered in 'circumstances where an online technology connects (1) an individual's IP address with (2) a visit to a[n] [unauthenticated public webpage] addressing specific health conditions or healthcare providers.'" (HHS). Which parts apply to a given page depends on your site and setup, so talk to your counsel.

In practice, journeys leak in four places:

• Ad landing URLs and UTM values that name a condition or treatment. See whether UTM parameters are PHI.
• Forms, quizzes and intake steps, where answers can ride along with a tracking event. See what counts as PHI on a website.
• Booking widgets and embedded tools that load their own trackers. See the booking widget PHI leak audit and YouTube and Google Maps embeds.
• Event and conversion names that describe the service. Use neutral aliases instead.

Measuring the journey without sending PHI

Three measurements carry most of the value of a journey map, and none needs a condition name or a form answer.

• The click that started it. Keep the ad click ID with the visitor, so every later step can be credited to the ad.
• The booking, even in another tool. When booking happens in a separate tool, such as Jane App, Calendly or Acuity, the ad click has to travel with the visitor across that hop, or the booking arrives with no ad attached. See booked appointment attribution.
• The outcome, back from your systems. Attended visits and purchases happen in your CRM or EHR. Bring them back through webhooks or offline conversion uploads, credit each to the original ad click, and send it under its neutral alias. See CRM lifecycle stages as conversions.

Then decide how credit is shared when a patient clicked more than one ad. Last click gives it all to the final ad, first click to the first, and linear splits it evenly; see attribution models for healthcare marketing. Attribution windows decide how long after a click a booking still counts.

Finally, write the map down as a tracking plan: each stage, its event, the alias each platform receives and what never leaves your site. Curve's tracking plan builder makes one from four answers.

How Curve Compliance helps

Curve Compliance measures each stage of the map without sending patient details to ad platforms. Curve replaces browser ad pixels with one script and sends conversions server-side to the Meta Conversions API, Google Ads, TikTok, Microsoft Advertising and LinkedIn, with a fixed list of fields per platform and neutral event names. Curve checks every event for PHI-like patterns, such as condition names, form answers and emails in URLs, and strips PHI before data reaches an ad platform. Contact identifiers are off by default on Meta, Google Ads and TikTok.

Curve keeps ad attribution when a visitor leaves to book in IntakeQ, Calendly, Acuity, Jane App, Boulevard, ZocDoc and other booking tools, and bookings made days later still match. Outcomes come back from booking systems, CRMs and call tracking through incoming webhooks, from EHR and intake tools through Keragon, and as offline conversion uploads, each credited to the original ad click. Campaign Reporting puts Meta and Google Ads spend next to those conversions with five attribution models, and lets you open one anonymous prospect to see their ad clicks and visits in order, from the first ad click to the booking. Curve is SOC 2 Type II, and Curve's team does the setup, typically live in about a week.

Sources, checked October 26, 2026: HHS, Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates; AHRQ, What Is Patient Experience?; Meta Business Tools Terms; Curve's tracking plan builder and Campaign Reporting.

Frequently Asked Questions

What are patient acquisition strategies?

Patient acquisition strategies are the ways a practice brings in new patients, such as search ads, paid social, local search, referrals and easy online booking, each judged by the booked and attended visits it produces. Curve Compliance credits each booking to the ad click behind it without sending PHI to ad platforms.

How to create a patient journey map?

Pick one service and one kind of patient. List the stages from the first search or ad to the visit and the return visit, and for each stage write the patient's question, the channel and the event that proves the step happened. Then mark what must stay out of every ad platform at each stage, such as form answers and visit reasons, and write the result down as a tracking plan.

What are the 5 stages of the customer journey?

A common five-stage model is awareness, consideration, purchase, retention and advocacy. For a clinic, purchase is the booking and first visit, and advocacy is a review or a referral.

What are some examples of customer acquisition strategies?

Search ads, paid social, local search listings, referral programs, reviews, partnerships with other providers, and landing pages that link straight to booking. In healthcare, judge each on booked and attended visits.

What does "patient retention" mean?

Patient retention means patients keep coming back to the same practice for follow-up, ongoing or new care instead of going elsewhere. You can measure it from your CRM or EHR as return visits or renewals; before you use patient information for marketing, check whether you need a HIPAA authorization (authorization guide).

What is a funnel strategy in marketing?

A funnel strategy plans marketing around the stages people pass through, from seeing an ad to buying, and measures how many move from each stage to the next. In healthcare the last stages are the booking and the attended visit; see the healthcare marketing funnel.

Can you give me an example of a marketing funnel?

A dental practice's funnel might run: a search ad click, a visit to the new-patient page, a booking in Jane App, a completed first visit, then a return visit for a cleaning. The booking and the visits reach the ad platforms under neutral aliases, such as event_1 for the booking (the first step in this funnel), with nothing about the appointment itself.

How to define patient experience?

AHRQ defines it this way: "Patient experience encompasses the range of interactions that patients have with the healthcare system, including their care from health plans, and from doctors, nurses, and staff in hospitals, physician practices, and other healthcare facilities." AHRQ adds that "A common misconception is that patient experience and patient satisfaction are the same" (AHRQ).

Talk to Curve Compliance

Book a call. Bring your journey map and Curve Compliance will show how each stage can be measured: bookings credited to the ad click, outcomes back from your CRM or EHR, PHI stripped before data reaches an ad platform, and a BAA on every plan. Curve's team does the setup, typically live in about a week. Book a call with Curve.