Quick answer
Analytics at HM is the measurement layer that makes every other service accountable. Attribution Tracking is the part of that work this page covers, and it sits in the Infrastructure pillar because you cannot rank a site that does not exist, and you cannot improve what you do not measure.
Key takeaways
- Analytics at HM is the measurement layer that makes every other service accountable.
- Often nobody buys it directly.
- “Which of these channels actually produced patients?” Some of it we can answer cleanly, some we can’t, and we’ll tell them which is which.
- Attribution Tracking sits in the Infrastructure pillar, and you cannot rank a site that does not exist, and you cannot improve what you do not measure.
- HM will not deploy tracking on authenticated patient portal pages, appointment confirmation screens containing patient identifiers, or any page where PHI is present.
01 — OverviewWhat Attribution Tracking is, and what it is not
Analytics at HM is the measurement layer that makes every other service accountable. It has two halves. The first is instrumentation: GA4 configured to the practice’s actual conversion events, Search Console, call tracking with dynamic number insertion, form-to-CRM handoff, offline conversion import so booked appointments flow back to the ad platforms, and server-side tagging where the privacy posture calls for it. The second is interpretation: a monthly report that says what happened, why, what we’re changing, and what we expect next month. A number without a decision attached is decoration. It is not a dashboard. This pillar sits under our services index, which covers all twelve service lines.
Attribution Tracking is part of Analytics and Reporting, one of the twelve service lines Healthcare Marketing runs, and it belongs to the Infrastructure pillar of the 4-Pillar Framework.
Who buys it, and what they already believe
Often nobody buys it directly. It arrives bundled, which is part of the problem. When it is bought deliberately, the buyer is an administrator or a physician-owner who has just realized they’ve spent two years and a six-figure sum with no idea what worked. What burned them: a monthly PDF full of green arrows; an agency that reported “leads” without defining the term; a Google Ads account they didn’t own and couldn’t see after the relationship ended; a call tracking number that stayed on the site after the vendor left and stopped forwarding.
Explore the full guide
50 in-depth guidesThis page is the hub. The guides below apply Attribution Tracking to a specific specialty or a specific practice situation, because the work is not the same for a solo psychiatrist and a six-location orthopaedic group.
Start here — cornerstone guides
By specialty and situation
Behavioural health
Primary care
Medical
Diagnostic and acute
The complete index — all 50 guides in this pillar
02 — SearchThe queries this hub is built on
These are the queries that decide the build. Read the right-hand column as the work order: each one names a page that has to exist before the query can be won.
6 priority queries for Attribution Tracking. Keywords are intent-matched from the sitemap and are not volume-validated; confirm in a keyword tool before build.
Depth is a topical authority play that happens to produce volume
A twelve-page site can answer twelve questions, rank for twelve and be cited twelve times. A five-hundred-page site answers five hundred, and each new page strengthens the topical authority of every page already there. The entry tier is 500-plus pages, scaling to 10,000, and there is nothing below it. On top of the foundation, seven blogs a week produces more than 365 indexed pages a year.
WebFX analysed 130,070 healthcare queries in July 2025 and found that 51 percent trigger AI Overviews, roughly double the cross-industry rate, rising to 66.9 percent for informational queries. Google’s own documentation states that for topics affecting health, its systems give more weight to content aligned with strong E-E-A-T signals, and that of the four components, trust matters most.
03 — What owners care aboutThe questions this work has to answer
“Which of these channels actually produced patients?” Some of it we can answer cleanly, some we can’t, and we’ll tell them which is which. Calls tracked to source and recorded where state law permits, forms tied to source and appointment type, and, where the practice’s system supports the handoff, appointments matched back. What we can’t do is assign a clean dollar to a patient who saw a blog in March, a Google Business Profile in June, and called after a friend’s recommendation in August. We report that as assisted rather than pretending to precision we don’t have. “Is any of this a HIPAA problem?” Here’s the accurate picture, and most agency copy gets it backwards. The OCR online tracking bulletin was issued December 2022 and revised March 2024.
The problem
HIPAA governs the use of PHI, not advertising as such. General advertising that uses no PHI isn’t “marketing” under 45 CFR 164.501 at all. Exposure sits in patient lists, targeted outreach, identifying testimonials, and tracking configurations — not in counting how many people booked.
The solution
What we can’t do is assign a clean dollar to a patient who saw a blog in March, a Google Business Profile in June, and called after a friend’s recommendation in August. We report that as assisted rather than pretending to precision we don’t have.
The resolution
Baseline captured for every metric before any other service ships work. Analyze — week 4. First full data review. Historical performance reconstructed where the data allows, holes documented where it doesn’t. This is where we tell the client what their previous agency’s numbers actually meant.
Thirty minutes with Steven. A diagnosis of where Attribution Tracking is costing you, not a pitch.
Schedule a Meeting04 — The delivery standardWhat actually gets done, and when
Define — week 1. Conversion taxonomy. What counts as a lead, what counts as a qualified lead, what counts as a booked appointment, and who at the practice confirms the last one. Written down, agreed, and not changed mid-engagement without a note in the report. Measure — weeks 1–3. GA4 rebuilt or audited against the taxonomy. Search Console verified across all property variants. Call tracking installed with dynamic number insertion and pool sizing appropriate to traffic.
05 — The first 90 daysWhat the build sequence looks like
Marketing timelines in this category are usually vague because vagueness is safer. Here is the published sequence, and it is the same one every engagement runs.
Brand book, then a workable site
The Brand Intelligence Book and brand guide are delivered in week one, before anything is designed or written. A workable site goes live in weeks two to three. Content and Google Business Profile work start in week one in parallel.
Press and local targeting
The first press release goes out in week five. Local targeting begins in weeks five to six, at roughly 25 pages per city-and-service target for every $1,000 per month of spend.
Depth, and the first movement
Local SEO moves in 2 to 4 months and organic rankings in 3 to 4, so this is the window where the first measurable change usually appears. Inquiries follow at 6 to 12 months, and the strongest returns at 12 to 18.
06 — Hard stopsWhat we will not do here
Every recommendation has a cost, a timeline and a thing it makes harder. These are the limits on Attribution Tracking, stated before the contract rather than after the first report.
The rules that bite in analytics and reporting. HM will not deploy tracking on authenticated patient portal pages, appointment confirmation screens containing patient identifiers, or any page where PHI is present. The June 2024 vacatur narrowed the OCR bulletin for unauthenticated pages only, and the state wiretapping and CIPA exposure is independent of it. We won’t upload patient lists to advertising platforms for custom or lookalike audience creation. That’s a marketing use of PHI requiring written authorization under 45 CFR 164.508(a)(3), and the two exceptions (face-to-face communication and promotional gifts of nominal value) don’t cover it.
07 — Where it sitsAttribution Tracking in the 4-Pillar Framework
Attribution Tracking is one of three services inside Analytics and Reporting, alongside call tracking and executive reporting. All three sit in the Infrastructure pillar, and you cannot rank a site that does not exist, and you cannot improve what you do not measure.
That sequence is not a preference. A practice that buys only this service will move slowly, because the twelve services have a dependency order and the 4-Pillar Framework encodes it. Nothing in Visibility gets sold before Infrastructure is in place or in flight, Authority starts in week one because it has the longest lead time, and Growth is only worth what the Infrastructure can convert.
08 — PricingWhat this costs, and why there is no band
Engagements start at $2,000 per month. That floor is published. There is no band above it, and the honest reason is that a band would be a fiction.
What a practice pays is set by how contested its market is, how large it is, and how much has to be built before anything can be amplified. Attribution Tracking is rarely bought alone, and where it is, we will say on the call whether it will do anything useful without the pillar beneath it. The number for a specific practice is given on that call rather than after three meetings.
No exclusivity, and the reason
We do not offer market exclusivity. An exclusivity promise is a promise to turn away a practice that needs the work. What we build instead is an asset a competitor cannot copy, because it is five hundred pages deep in the practice’s voice with its clinicians’ names on it.
The bottom line
Attribution Tracking is the infrastructure work that makes the rest of the programme legible to a patient and to a search engine. It is bought as part of a sequence, not as a tactic. The next step is thirty minutes to find out whether it is the thing actually holding you back.
Frequently asked questions
How long before Attribution Tracking produces new patients?
Rankings move in 3 to 4 months, inquiries grow in 6 to 12 months, and the strongest returns arrive in 12 to 18 months. Local search moves faster, typically in 2 to 4 months. Those are the timelines we publish and they do not improve when a prospect asks. Anything faster is either paid media, which has its own economics and stops when the spend stops, or a promise nobody can substantiate. The compounding is the point: page 300 makes page 12 rank better, which is why the curve is slow at first and then is not.
Can we buy Attribution Tracking on its own?
Sometimes, and we will tell you on the call whether it will do anything useful by itself. Attribution Tracking sits in the Infrastructure pillar, and you cannot rank a site that does not exist, and you cannot improve what you do not measure. The most common way marketing money is wasted in healthcare is buying an amplification service before the thing being amplified is worth pointing at. If that is your situation we will say so before the contract rather than after the first report, which costs us a sale and saves you a quarter.
What will you not do in Attribution Tracking?
HM will not deploy tracking on authenticated patient portal pages, appointment confirmation screens containing patient identifiers, or any page where PHI is present. The June 2024 vacatur narrowed the OCR bulletin for unauthenticated pages only, and the state wiretapping and CIPA exposure is independent of it. We won’t upload patient lists to advertising platforms for custom or lookalike audience creation. That’s a marketing use of PHI requiring written authorization under 45 CFR 164.508(a)(3), and the two exceptions (face-to-face communication and promotional gifts of nominal value) don’t cover it.
What does it cost?
Engagements start at $2,000 per month and we publish that floor. There is no band above it because a band would be misleading. Cost is driven by how contested the market is, how large the practice is, and how much has to be built before anything can be amplified. Local page production runs at roughly 25 pages per city-and-service target for every $1,000 per month of spend, which gives a concrete way to reason about what a given budget buys. The specific number comes on the first call, not after three meetings.
Who actually does the work?
Steven Lockhart is on strategy for every engagement and is the named principal you will reach. The firm is deliberately small and grows only at the rate that lets it hold the standards it publishes. Healthcare Marketing is healthcare-exclusive across thirty-two specialties, and the specialty register behind this work is researched per specialty rather than adapted from a general template.
What happens to the work if we leave?
It stays with the practice. The site, the content, the profiles, the analytics and the data. The site is the only asset in a marketing programme that the practice owns outright, that appreciates, and that cannot be removed by an algorithm change, a platform policy or a lapsed subscription. It is worth asking any agency this question directly and listening for whether the answer involves a proprietary platform, a template licence, or content that lives on infrastructure you do not control.
How we reviewed this page
Every statistic on this page carries its source at the point of use, and each source is listed below. Regulatory statements are cited to the Federal Trade Commission, the Department of Health and Human Services, and Google’s own published policy rather than to secondary summaries. The delivery standard and the hard stops are drawn from Healthcare Marketing’s own service register for Analytics and Reporting, which is revised on the same cadence as this page.
Written and reviewed by Steven Lockhart, founder of Healthcare Marketing, who brings 25-plus years of marketing experience, 15-plus of it healthcare-exclusive. Healthcare Marketing is a marketing agency and does not employ clinicians, so nothing on this page is presented as clinical review. It is reviewed quarterly, and within 14 days of any Google core update or advertising-platform policy change that contradicts it.
What’s new: September 2026 — first publication.
References
- schema.org — https://schema.org/MedicalBusiness
- w3.org — https://www.w3.org/WAI/ARIA/apg/practices/structural-roles/
- sitemaps.org — https://www.sitemaps.org/schemas/sitemap/siteindex.xsd
- Federal Trade Commission. Advertising and marketing business guidance. consumer.ftc.gov
- U.S. Department of Health and Human Services. HIPAA for professionals: privacy. hhs.gov