Which Ads Drive Booked Appointments? HIPAA-Compliant Attribution
To know which ads drive booked appointments without breaking HIPAA, use an attribution tool such as Curve Compliance to keep the ad click with the patient through your booking tool, bring each booking and call back to that click, and report it next to ad spend without sending health details to Google or Meta. Curve Compliance keeps attribution when patients book in IntakeQ, Calendly, Acuity, Jane App and other schedulers, credits calls and CRM outcomes to the original click, and signs a BAA on every plan.
Book a call- Implement in days, not weeks
- Scale Google and Meta ads
- No engineering team required
- HIPAA Compliant
- SOC 2 Type II
- US Hosted
Why Ad Platforms Can't Tell You Which Ads Book Patients
When a visitor moves from your landing page to a scheduler on another site, the click ID and UTMs stay behind, so the booking can't be credited to the ad.
Sending the appointment itself is where the risk sits. The HHS bulletin on online tracking gives this example: “if an individual makes an appointment through the website of a covered health clinic for health services and that website uses third party tracking technologies, then the website might automatically transmit information regarding the appointment and the individual's IP address to a tracking technology vendor.” On June 20, 2024, a federal court in Texas vacated a portion of that bulletin, and the notice at the top of the HHS page says “HHS is evaluating its next steps in light of that order.” Whether a given booking page involves PHI is a question to talk through with your counsel.
The platforms draw their own lines. Section 1.h of the Meta Business Tools Terms, effective November 3, 2025, has advertisers agree not to share Business Tool Data that “includes or is based on, directly or otherwise, health information” and says: “The names you choose and criteria you establish for your events, conversions, and any custom audiences you create must not reflect, imply or be based on any category of information described in this Section 1.h.” Google's personalized advertising policy says “Content related to Health is a sensitive interest category” and, for those ads, “You can't use advertiser-curated audiences.”
So the answer has to come from your own attribution: keep the click, bring the booking back to it, and send each platform a neutral conversion it can optimize on.
Keep the Click Through the Booking Tool
When a visitor clicks through to book, Curve Compliance hands the scheduler a bridge token, a short reference to the visit's ad attribution, and credits the booking to the original ad click when the booking comes back. Bookings made days later still match. The bridge token carries no form content and is not a patient identifier.
| Booking tool | How the ad click is kept |
|---|---|
| IntakeQ, Calendly, Acuity, Jane App and Zocdoc | Plain booking links are handled automatically. Each tool has its own page with the steps and its BAA status. |
| OptiMantra, Boulevard, Mindbody, Vagaro, Square, Setmore and Booker | Plain booking links are handled automatically. |
| GoHighLevel and embedded booking widgets | Set up by Curve's team. |
Choosing a scheduler? See HIPAA-compliant scheduling software and ad attribution.
Bring Bookings, Calls and Visits Back
A booking is one outcome. Calls, CRM stages and completed visits are others, and Curve Compliance credits each to the original ad click:
- Booking systems, CRMs and call tracking such as CallRail send outcomes through incoming webhooks.
- EHR and intake tools, such as Healthie, Athenahealth, OptiMantra, IntakeQ and Jane, send outcomes through Keragon.
- Offline conversion uploads from a CRM or EHR bring in the rest.
For calls, see HIPAA call tracking for Google Ads. For uploads, see offline conversions from booked appointments.
One Report Next to Spend
Campaign Reporting in Curve Compliance puts Meta and Google Ads spend next to the conversions Curve tracked, for each platform and campaign. It offers five attribution models, a list of the conversions behind any number, and a single prospect's journey from ad click to booking. HubSpot and WhatConverts outcomes show as CRM revenue and close rate.
That is the answer to “which ads drive booked appointments”: each campaign shown with the bookings and calls it produced, not only its clicks. To turn it into a cost per booked patient, see platform ROAS versus real ROAS.
What to Send Back to Google and Meta
Send each booking back as a conversion so campaigns optimize on appointments, not form fills. Curve Compliance sends it from Curve's servers to Meta Conversions API, Google Ads, TikTok, Microsoft Advertising and LinkedIn. Each platform receives only a fixed list of fields, under a neutral event name such as “Lead” in place of a treatment or condition. Contact identifiers are off by default on Meta, Google Ads and TikTok.
Curve checks every event for PHI-like patterns, such as condition names, form answers and emails in URLs, and strips PHI before data reaches an ad platform. Event Logs show what Curve sent to each platform and what the platform accepted. To bid on visits that actually happened, see optimizing healthcare ads for attended appointments.
How Curve Sets It Up
Map Your Booking Path
The free website scan lists the pixels and trackers on your landing and booking pages, and Curve's team maps where patients book and call.
Replace Pixels With One Script
Curve's team swaps your browser ad pixels for one script and connects your ad platforms server-side, with neutral event names.
Connect Bookings, Calls and Outcomes
Your scheduler, call tracking, CRM and EHR are linked so every booking credits the right ad. Curve signs a BAA on every plan, and setup is typically live in about a week.
Scan your site
Run Curve's free website scan on the page your ads send people to. It lists the ad pixels, analytics tags, session recorders and other trackers running there. Book a call and Curve's team will go through the results with you, then set up HIPAA-compliant tracking that keeps your campaigns optimizing.
Or book a callWhat You Get With Curve
- Bookings credited to the ad click that started them, even when made days later
- Calls, CRM outcomes and EHR outcomes credited to the same click
- Campaign Reporting with Meta and Google Ads spend next to booked appointments
- Neutral event names and a fixed list of fields for each ad platform
- Event Logs that show what Curve sent and what each platform accepted
- A BAA on every plan, with setup done by Curve's team
Guides on Booked Appointment Attribution
Sources, checked October 26, 2026: HHS bulletin on online tracking technologies; Meta Business Tools Terms; Google Ads, Personalized advertising: Health.
Booked Appointment Attribution Questions
How do I know which ads drive booked appointments without violating HIPAA?
Keep the ad click attached through your booking tool, credit each booking back to that click, and report it next to ad spend without sending health details to Google or Meta. Curve Compliance does this for clinics and telehealth brands and signs a BAA on every plan.
Can phone calls and online bookings show in one report?
Yes. Calls from your call tracking arrive in Curve Compliance through incoming webhooks, bookings come back from your scheduler, and Curve credits each one to the original ad click. Campaign Reporting then puts Meta and Google Ads spend next to those conversions for each campaign. Curve and CallRail.
Do bookings made days after the ad click still count?
Yes. When a visitor leaves your site to book in IntakeQ, Calendly, Acuity, Jane App or another supported scheduler, Curve Compliance keeps the ad attribution, and bookings made days later still match the original click. Supported scheduling tools.
Which attribution model should a clinic use?
Compare more than one before you move budget. Campaign Reporting in Curve Compliance offers five attribution models, a list of the conversions behind any number and a single prospect's journey from ad click to booking, so you can see how each model credits the same bookings. Attribution models for healthcare, compared.
What does Meta receive for a booked appointment?
A conversion under a neutral event name, sent from Curve's servers to Meta Conversions API with a fixed list of fields. Contact identifiers are off by default on Meta, Google Ads and TikTok, Curve strips PHI before data reaches an ad platform, and Event Logs show what Curve sent and what Meta accepted. Curve and Meta Conversions API.
Does Curve Compliance sign a BAA?
Yes. Curve Compliance signs a BAA on every plan, and Curve is SOC 2 Type II. Your scheduler, EHR and CRM work under their own agreements with you, and the BAA Directory shows which tools sign one. BAA Directory.
How long does setup take?
Curve's team does the setup for you, and it is typically live in about a week, case by case. That covers replacing browser pixels with one script, connecting your ad platforms server-side and linking your booking tools, call tracking, CRM and EHR. Start with the free website scan.
Talk to Curve Compliance
See which ads drive booked appointments, set up by Curve's team, with a BAA on every plan.
- Signed BAA included
- Live in ~7 days
- No engineering lift