Privacy guide
Mental Health Marketing That Respects Client Privacy
Mental health marketing asks people to take a sensitive step. Even before someone becomes a client, the pages they visit, the forms they complete, and the appointments they request can reveal more than a practice needs for ordinary campaign measurement.
Privacy-respecting marketing starts by reducing that exposure. It does not treat a consent banner, a vendor contract, or a product label as a universal answer. The actual data flow matters.
Map the journey before choosing tools
Draw the path from advertisement or search result to landing page, business inquiry, scheduling, and care. List every tag, form, scheduler, chat tool, call workflow, and notification involved. Note where a person could enter a name, contact detail, appointment reason, or clinical information.
This map often reveals avoidable duplication. A scheduling confirmation might be sent to several tools even though the practice needs only an aggregate booking count for marketing. A form notification might contain more information than the recipient needs.
Remove unnecessary fields and destinations first. Technical controls are easier to evaluate when the workflow itself is simple.
Keep acquisition forms separate from clinical intake
A general marketing or audit-request form should collect only business information needed for the stated purpose. Detailed clinical history does not belong in an advertising lead form. If a practice needs clinical intake, it should occur through systems and procedures the practice has approved for that purpose.
The same principle applies to HMP's free ad account audit. The audit needs business and aggregate account information, not patient or client records.
Clear form copy should explain who is collecting the information, why, and how a person can ask a privacy question. See the site's Privacy Policy for information about website data handling.
Avoid health-based audience building
Do not upload client or patient lists to advertising platforms. Do not create remarketing audiences from visits to condition-specific pages, appointment flows, or other health-related activity. Google's personalized-advertising policy restricts certain health-related personalization, and professional or legal requirements may add further limits.
Contextual and carefully scoped search campaigns can reduce the need for individual-level audience profiles. Geographic settings should reflect real service areas and platform rules, not attempts to infer a person's condition.
An agency should also avoid receiving exported appointment records to perform attribution. The practice can reconcile identities internally and share approved aggregate counts instead.
Treat URLs and events as potential disclosures
Sensitive information can leak through apparently technical details. A URL containing an appointment reason, an event containing a form field, or a confirmation page with a treatment name in its address can transmit information to third parties.
Use generic event names and destination paths where possible. Inspect actual network behavior rather than relying only on a settings screen. Test confirmation pages, error states, embedded schedulers, and mobile flows.
Do not add advertising or analytics tags to authenticated, scheduling, intake, or other patient-facing pages by default. HHS tracking guidance provides implementation-specific considerations for regulated entities. Legal and privacy reviewers should assess the practice's actual configuration.
Write advertising without diagnosing the reader
Privacy-conscious copy also respects autonomy. Avoid language that claims to know what the reader is experiencing, promises a clinical result, or pressures someone into immediate disclosure. Describe approved services, access, and the next administrative step.
Testimonials can create both confidentiality and professional-rule concerns. This guide does not rely on them. Clinical claims and specialty descriptions need designated review.
A clear, restrained page is often more useful than a highly personalized one. The reader should understand the practice without feeling watched.
Use aggregate reporting for booked-client economics
A monthly marketing report can distinguish:
- Gross booked new clients: unique new-client appointments under the agreed attribution rule.
- Cancellations: those bookings canceled before the reporting cutoff.
- Net booked new clients: gross bookings minus cancellations.
- Attended: appointments the practice marks completed.
- Paid: new clients with collected service revenue under the practice's aggregate rule.
The practice performs identity-level deduplication internally. HMP receives only approved business aggregates, not names, contact details, appointment notes, or clinical information.
Cost per net booked new client is ad spend divided by net booked new clients. Management fees are shown separately. Booked, attended, and paid are different measures and should never be collapsed into one conversion number.
Review contracts and responsibilities
A business associate agreement may be required when a vendor performs services involving PHI on behalf of a covered entity. Whether it is required depends on the relationship and data flow. Signing one does not make an otherwise inappropriate marketing use permissible.
HHS explains that the Privacy Rule generally requires authorization for marketing uses and disclosures, with specific definitions and exceptions. The practice and its counsel must evaluate the actual workflow. HMP's default design is to avoid receiving PHI for marketing reporting, not to seek broader access.
Document who approves tools, who reviews incidents, how access is revoked, and how data is deleted. Keep those operational promises consistent with the final privacy policy and client agreement.
Make privacy part of monthly optimization
A monthly review should include more than cost and bookings. Check for new fields, new tags, changed vendors, altered confirmation pages, and unexpected data in notifications. Revisit access after staff or agency changes.
If a campaign cannot be measured without an unnecessary disclosure, change the measurement plan. A less granular report can still answer the owner's core question: how did aggregate advertising spend compare with net booked new clients?
HMP service and next step
HMP's mental health advertising service uses flat fees: Solo at $500 per month with no setup fee, Starter at $1,250 per month plus $1,500 setup, and custom Growth or Group Practice scopes. Advertising spend is separate, and management is never a percentage of spend.
Healthcare Marketing Partners offers a free ad-account audit with plain-language findings about available account information. Confirm the review scope and authorized permissions separately. An inquiry does not authorize account changes or paid management; do not send patient information.
Request a free audit