Practical writing on web performance, SEO, and AI visibility.
Google showed an AI Overview on 46 of 100 top US searches across 10 medical specialties, but they held only 23% of search volume. Near-me searches showed map packs; every question search had an AI Overview.
Walk-in clinics get found mostly in Google's map pack. Urgent care marketing starts with an accurate Business Profile, a fast page per location, and tracking that does not leak patient data.
Fix LCP first: only 62% of mobile sites had a good LCP in the 2025 Web Almanac. Then fix INP and CLS. Here are the thresholds and the fixes that matter on a medical practice site.
The ADA covers a practice's website, but sets no technical standard for private practices. HHS's Section 504 rule requires WCAG 2.1 AA for funding recipients from May 11, 2027 (15+ staff).
Google's AI Overviews cited hospitals, associations, YouTube and online therapy firms most for therapy searches. Private practices made up 3 of 34 cited links in our October 2026 check.
Doctors rank locally through relevance, distance and prominence, the three factors Google names. A complete Google Business Profile, genuine reviews and clear service pages are the parts a practice controls.
Only if your practice uses a business Microsoft 365 plan, where Microsoft's BAA applies by default, and you configure it. Exchange Online, OneDrive for Business, SharePoint Online and Teams are in scope.
Healthcare content marketing means publishing accurate pages that answer patient questions, written or reviewed by clinicians. Publish treatment, cost and condition pages first, then patient guides.
Start with channels you control and that keep working: your Google Business Profile, reviews and website pages. Add AI answers, recall emails and referrals next. Paid ads and social come last.
A patient portal is HIPAA compliant when access is controlled, activity is logged, data is protected in transit, every vendor signs a BAA, and no tracking code runs on logged-in pages.
Only if your practice uses a Slack Enterprise plan, signs Slack's BAA, follows its HIPAA guide and limits PHI to messages, files and private channel names. We checked Slack's page on October 15, 2026.
No. Google says you don't need llms.txt to appear in Search or its AI features, and the file neither helps nor harms rankings. It is optional and cheap; indexable, clear pages matter more.
Spend first on what patients check before they call: an accurate Google Business Profile, a website that answers their questions, and honest reviews. Paid ads come after.
A practice can post health tips, news and staff content freely. Anything that identifies a patient, including a photo, story or review reply, needs the patient's written HIPAA authorization.
Only on a Docusign Enhanced plan with a signed BAA. Docusign's pricing page, checked October 14, 2026, does not include HIPAA support in Personal, Standard or Business Pro.
Only if you use an eligible Dropbox team plan, sign Dropbox's BAA before uploading patient data, and lock down sharing and apps. We checked Dropbox's own help pages on October 14, 2026.
A VoIP phone service fits HIPAA only when the vendor signs a BAA and the practice sets it up safely. See what HHS says and which vendors offer a BAA.
Only if the animation slows the page, hides content from crawlers or gets in the patient's way. Here is what Google measures and how to build 3D sites that stay fast.
Only if the practice keeps health information out of Stripe. Stripe's terms say not to send it PHI, and we found no Stripe BAA. Here is how to take payments safely.
A chiropractic marketing plan rests on an accurate Google Business Profile, fast service pages, honest reviews and claims you can back up. Here is a 90-day plan.
Eye clinics rank locally on relevance, distance and prominence. An accurate Google profile, doctor listings, clear service pages and genuine reviews improve the parts a clinic controls.
Dental marketing in 2026 works best on four things a practice controls: its Google profile, a clear website, genuine reviews and honest ads that follow the ADA Code, FTC and HIPAA.
Google showed an AI Overview on 36 of 60 top US dental searches. Cost and treatment searches got one far more often than near-me searches, which showed map packs instead.
Ask every patient for a review the same way, offer nothing in return, and never reveal patient details in replies. That keeps a practice inside FTC, Google and HIPAA rules.
The best healthcare website designs load fast, work fully on a phone, meet accessibility standards, show who provides the care, and protect patient data. Here is how to test each.
SEO for physical therapists means making a clinic easy for Google and AI tools to match with nearby searches. Start with the Business Profile, condition pages and reviews.
No. WhatsApp offers no BAA in the terms we read, and its business policy restricts health information where rules like HIPAA apply. Here is what the documents say.
Only if your practice uses Teams in a Microsoft 365 or Office 365 business subscription covered by Microsoft's BAA and sets it up correctly. Here is what Microsoft and HHS say.
Let OpenAI's search crawler read your site, state your practice facts in plain text, and keep them the same everywhere. No one can guarantee a recommendation. OpenAI says placement is not guaranteed.
Surgeons rank for procedures by giving each procedure its own page, showing who performs it, and keeping a complete Google Business Profile for every location. Google treats health topics with extra care.
Look for a host that signs a BAA, names the services the BAA covers, and gives you controls to encrypt, restrict and log access to patient information. No host is HIPAA certified.
Only if staff sign in with a work account on an organization plan covered by Microsoft's BAA, and Copilot is properly configured. Web search queries are not covered. Keep patient data out of personal accounts.
Healthcare reputation management is the work of earning honest patient reviews, replying within HIPAA, and keeping public details accurate. Google and the FTC ban incentives tied to praise and fake reviews.
SEO for orthodontists gets a practice shown when a nearby parent or adult searches for braces, aligners or an orthodontist. A full Google Business Profile, clear pages and honest reviews do most of the work.
Only if you use a HIPAA-ready Claude service, such as an Enterprise plan or the API, with Anthropic's BAA and the required configuration. Free, Pro, Max and Team plans cannot enable HIPAA.
No. Mailchimp's own pages offer no Business Associate Agreement that we could find, and its terms put HIPAA on the customer. Keep patient information out of Mailchimp. Checked October 9, 2026.
A dental website in 2026 should load fast on a phone, show who the dentists are, make booking simple, work for people with disabilities and protect patient data. See the standards.
Med spa SEO rests on one clear page per treatment, a complete Google Business Profile and content backed by licensed providers. See what Google and the FTC expect.
Only if your email service has signed a BAA with the practice and you apply reasonable safeguards. See what HHS says and how Google, Microsoft, Proton and Paubox handle the BAA.
HubSpot, Salesforce and Zoho CRM each offer a BAA with conditions. HubSpot needs an Enterprise edition and Sensitive Data settings. See what each vendor requires. Checked October 9, 2026.
HIPAA requires written patient authorization before a practice uses patient information for marketing, with narrow exceptions. See how the rule applies to email, ads and testimonials.
Dentists rank in Google's map pack on relevance, distance and prominence. A complete Business Profile, genuine reviews and a clear website improve the two factors a practice controls.
Only if safeguards are in place. Texting patients fits HIPAA when the tool signs a BAA, messages carry little detail, and the patient's preference is honored. See the rules and tools.
A medical website costs $19 to $99 a month on a builder plan, or $2,000 to $100,000 from an agency. Most agency projects cost under $10,000.
SEO for doctors has four parts: the Google Business Profile, service pages, trust signals, and reviews. Here is the data and a 30-day plan.
Google Voice is covered by Google's BAA for managed, licensed users in a Google Workspace account. The free personal version is not. Here is how to check.
Ask AI tools the questions your patients ask and record whether your practice is named. The Webpatch AI Visibility Check does this in five steps.
Patients search for a procedure more than for a surgeon. "Mommy makeover" gets 37,000 US searches a month. Here is how a practice wins those searches.
Zoom can be used for telehealth when the practice has a signed BAA with Zoom. A Zoom account without a BAA is not covered. Here is what Zoom and HHS say.
YMYL means "Your Money or Your Life." It is Google's name for topics that can harm health, money, or safety. Medical content is held to a higher standard.
Dermatology SEO has two halves: medical searches and cosmetic searches. "Botox near me" alone gets 88,000 US searches a month. Here is how to win both.
Calendly's security page lists no HIPAA program and no BAA. Do not use it for patient bookings. Here are two scheduling tools with a documented BAA.
A medical website in 2026 needs six things: speed, a full mobile version, accessibility, patient privacy, named clinicians, and a clear way to book.
Home care SEO gets an agency found when a family searches for care at home. Set the service area correctly, answer payment questions, and earn reviews.
A medical website can use a chatbot. If the chat can receive patient information, the vendor must sign a BAA and the practice must lock down its settings.
Wix signs a BAA on five plans. Squarespace bans patient data unless the account is HIPAA-enabled. WordPress depends on the host. Here are the details.
A website is HIPAA compliant when every system that touches patient data is under a BAA and meets the Security Rule safeguards. Here is a nine-point checklist.
"Chiropractor near me" gets 302,000 US searches a month and is hard to rank for. Condition searches like sciatica are open. Here is how to win both.
ChatGPT, Claude, Copilot, and Gemini each have a version that comes with a BAA. The free and personal versions do not. Here is the covered version of each.
Jotform, Google Forms, and Typeform can each collect patient data, but only on certain plans with a signed BAA. Here is the plan and the steps for each.
AEO for healthcare gets a practice named when patients ask AI a health question. Here is what Google and OpenAI require, with the data and six steps.
Dental SEO comes down to three things: a complete Google Business Profile, one page per treatment, and recent reviews. Here is the data and the steps.
ChatGPT is HIPAA compliant only on specific OpenAI plans with a signed BAA. Free and Plus accounts are not on OpenAI's eligible list. Here is which plans qualify and what you can do safely.
Therapists get found through a complete Google Business Profile, one page per specialty and city, and clear answers to client questions. Here is a six-step plan with 2026 search data.
Google Workspace can be HIPAA compliant if your admin accepts Google's BAA and locks down sharing. A free @gmail.com account has no BAA. Here is what is covered and how to set it up.
Yes, you can reply to patient reviews under HIPAA. You cannot confirm the reviewer is a patient or mention their care. Here are the rules, four real penalties, and replies you can copy.
Trackers like Google Analytics and Meta Pixel can break HIPAA when they sit on booking forms, patient portals, or symptom tools. Here is what the rules say in 2026 and a 5-step check you can run today.
SEO, AEO, and GEO are the three ways patients find doctors online today. Learn what each means and why one structured digital presence covers all three — without extra effort.