Healthcare Marketing Analytics That Tie Each Admit to Its Source

In June 2024, a federal court in Texas vacated part of the HHS guidance on online tracking technologies, and the rest of that guidance still stands. A tracking vendor that receives protected health information from a treatment center still needs a business associate agreement (BAA), so a treatment center has to plan its measurement around what each vendor is allowed to receive.

Healthcare marketing analytics, for a rehab or mental health program, is the work of connecting each admit to the ad, search, or referral that started it. The chain has four links, which are the click, the call or form, the verification of benefits (VOB), and the admission.

Most reporting problems happen where one link hands off to the next, because each link lives in a different system. Fix those handoffs and your reports can finally answer which marketing brings patients through the door.

The chain that links an ad or search to an admit

Every admit passes through the same 5 handoffs, whether the person found you through Google Ads, organic search, Meta, or a referral partner. The table shows where each step's data lives and what usually breaks it.

Marketing owns the first two rows and the last one, while admissions and operations own the VOB and admit rows. Nothing downstream works until someone owns each handoff by name.

Call tracking is the first fix

Many treatment inquiries start with a phone call, so a report built only on form fills leaves out much of your demand. Call tracking assigns a different number to each source and records which ad, page, or listing produced each call.

Dynamic number insertion (DNI) swaps the number on your website based on how the visitor arrived, while static numbers cover your Google Business Profile, directories, and print. Admissions then tags each call as qualified, VOB, or admit, which turns a call log into an outcome report.

Scale makes the tagging matter. Rize OC logged 15,095 tracked inbound calls in CallRail across Google, Bing, and Meta, with a unique number for each campaign. VOB and admission data fed back into those campaigns, which held the account to an $8,000 average cost per admit.

Call recordings often contain health details, so the call tracking vendor should sign a BAA before recording starts. Programs covered by 42 CFR Part 2, the federal rule for substance use disorder records, should bring their compliance lead into the setup as well.

Our guides to rehab call tracking and healthcare call tracking cover number setup, tagging, and Google Ads imports step by step.

Carry the source through the CRM to the admit

A form or call that reaches your CRM without its source is where most attribution dies. Pass the campaign, the landing page, and the ad click ID into hidden form fields, and have your call tracking tool write the same fields for calls.

Ask admissions to confirm the source on every admit, and keep a plain question such as how the person heard about you as a backup. When the tracked source and the stated source disagree, record both, because referral partners and families often search your name after someone recommends you.

Once a month, match the admits in your census against the leads in your CRM. Every admit that can't be traced to a lead is a gap to fix, and a 1-page list of those gaps is more useful than a larger dashboard.

What the HHS tracking guidance means for your analytics

The HHS guidance says the HIPAA Rules apply when information collected through tracking technologies includes protected health information. It also says that disclosing that information to a tracking vendor for marketing without a patient's authorization is not permitted.

The June 2024 ruling in American Hospital Association v. Becerra vacated one part of that guidance. HHS's own notice says the court struck the position that HIPAA is triggered when a tool connects a visitor's IP address with a visit to a public, unauthenticated page about health conditions or providers.

The rest of the guidance still applies. It says tracking tools on login-protected pages, such as a patient portal or a telehealth platform, generally have access to PHI, and it says a cookie banner is not a valid HIPAA authorization.

It also says a vendor's promise to strip or de-identify PHI after receiving it is not enough, because the vendor still needs a signed BAA. HHS has said it is evaluating its next steps after the ruling, so treat this area as unsettled and have healthcare counsel review your setup.

A practical setup for treatment center websites

• Keep form answers, program choices, and insurance details out of pixels, URLs, and analytics event names.
• Use neutral conversion names in ad platforms, such as qualified call or form submitted, never the name of a condition or a level of care.
• Send offline conversions from your CRM with the click ID and conversion name only, and review what the file contains before each upload.
• Get a signed BAA from every vendor that receives PHI for you, including call tracking, CRM, chat, and form tools.
• Audit every tag on intake and insurance pages at least quarterly, because site edits and plugins add scripts without notice.

Our addiction treatment marketing guide places this inside the full channel plan, and our piece on keeping health data out of marketing tools covers forms and CRMs in more detail.

Reports that answer the admit question

A useful monthly report shows the same 5 numbers for each channel and each level of care. Detox, residential, PHP, and IOP have different demand and different costs, so a blended cost per admit hides the program that is losing money.

Expect different systems to report different counts for the same step. At Hillside Horizon, Google Ads recorded 79 VOBs from paid search, while CallRail separately tagged 87 paid and 68 organic insurance checks, and neither count is wrong.

Hillside's 4–6 monthly admits are client-reported from its census, reflect SEO and paid search together, and are not imported into Google Ads. Name the source of truth for each row in your report, and our piece on census growth in SEO reporting explains how to report admits without overstating them.

Choosing an attribution model

Last-click attribution credits the final touch before a call, which tends to favor branded search and understate the content a family read the week before. Google Ads also offers data-driven attribution, which spreads credit across touches using your account's conversion data, so it only sees the touches Google can track.

For most single-location programs, record both the first known source and the last source on each lead, then compare them each quarter. Our rehab marketing attribution setup walks through the field structure.

Analytics for billing firms, labs, and telehealth

Companies that sell to treatment centers track a longer sales path. A search or LinkedIn post leads to a consultation request, then a proposal, and then a signed contract. Their reports should measure pipeline and closed accounts, not patient admits.

Search data still sits at the front of that path. For Cipher Billing, monthly impressions grew to 99,802, up from 5,316, and the site's behavioral health revenue cycle management ranking reached position 5, up from 85, which gave its sales team a measurable source of inbound interest.

Telehealth and psychiatry practices sit closer to treatment centers, because their intake forms collect health information. They should follow the same pixel and BAA rules above, and measure consultations booked and first visits completed by source.

Five checks to run this month

1. 1Call your own tracking numbers from 3 sources and confirm each one lands in the right campaign.
2. 2Submit a test form and confirm the source, landing page, and click ID reach the CRM record.
3. 3Pull last month's admits and count how many trace back to a tracked lead.
4. 4Open your intake page with a browser's developer tools and list every third-party script that loads.
5. 5Check that every vendor touching inquiry data has a signed BAA on file.

Those five checks take an afternoon and usually show exactly where your reporting loses the thread. If any of them fail, fix that handoff before you add a new dashboard or channel.

Frequently asked questions

How can I track which marketing brings patients through my door?

Give each channel its own tracking number, pass the source of every form into your CRM, and have admissions confirm the source on each admit. Then match admits to leads every month.

Can a treatment center use Google Analytics?

Many treatment centers use it with careful configuration. Keep form contents, program choices, and insurance details out of events and URLs, avoid tracking on login-protected pages, and have counsel review the configuration against HHS guidance.

Did the 2024 court ruling end HIPAA rules for website tracking?

No. The ruling vacated the part of HHS guidance about IP addresses on public health-information pages, while the rules on PHI, authorizations, and BAAs still apply to tracking that collects health information.

What should a monthly marketing report include?

Inquiries, qualified inquiries, VOBs, admits, and cost per admit, split by channel and by level of care, with a named system of record for each number.

Do we need a data team for this?

Usually not. Most of the work is call tracking, clean CRM fields, and a monthly match between admits and leads, which an agency and your admissions lead can run together.

If you want a second opinion on your tracking, our rehab PPC agency team will test your numbers, forms, and conversion imports and send a written report within 5 business days. Book a strategy call to schedule the audit.