PatientProcure
Healthcare Marketing

How to Vet a Healthcare Marketing Agency Before You Sign

September 26, 2026 12 min read

TL;DR

Before you sign with a healthcare marketing agency, check four things: proof you can verify (including a call with a former client), a straight answer on BAAs and tracking pixels, reports built around booked patients, and a contract that leaves your practice owning its accounts and phone numbers. Score each agency on a simple 20-point scale. Anything under 10 is a walk-away, however cheap it is.

Before You Vet a Healthcare Marketing Agency, Write Down Three Numbers

If you vet a healthcare marketing agency properly, it takes about two weeks. At the end you have one agency you trust, a contract you’ve read line by line, and one number you’ll hold them to in month four. If you do it badly, it takes one sales call and a signature. Then in month nine you find out your Google Ads account belongs to someone else.

Here’s the short version of what you’re checking for.

Vetting a healthcare marketing agency means confirming four things before you sign. Their results come from practices like yours. They handle patient data with HIPAA in mind. They report on booked patients, where most agencies stop at clicks and form fills. And the contract lets you leave with your ad accounts, website, phone numbers, and data intact.

But you can’t judge any of that until you know what you’re hiring for. If you don’t bring a goal to the pitch, the agency will pick one for you, and it will pick one it can hit. So before the first call, write down three numbers.

Bring these to every call. Then notice which agencies ask for them before you offer. That tells you more than any pitch deck.

What can go wrong: skip this step and you’ll end up comparing agencies on price and personality. The cheapest agency and the most likable one are rarely the one that fills your Monday schedule.

Ask for Proof You Can Verify, Including the Client Who Left

You’ve probably sat through a pitch where someone said they tripled leads for a dental practice. Maybe it was true. But if you don’t know the ad spend, the market, the time period, and what counted as a lead, the number tells you nothing. A practice that tripled leads by tripling its budget got a bigger bill and the same marketing.

For every case study an agency shows you, ask:

Good agencies answer these without flinching, even when they have to hide the practice’s name. If the answers get vague or turn into “every practice is different,” write that down.

Next, ask for references, and ask for one former client by name. Anyone can find two happy current clients. A former client who’ll get on the phone and say “they were good, we outgrew them” is worth more than both. If the agency says no former client will talk to you, that’s an answer too.

When a reference picks up, skip “were you happy?” Ask questions that are harder to spin:

One more check. Ask them to screen-share a live reporting dashboard for a current client (names hidden is fine). A polished PDF case study only has to be put together once. A live dashboard shows you what they look at every week.

(Side note: be careful with agencies whose own case studies brag about patient outcomes, like pounds lost or dramatic before-and-after results. If an agency is that loose with medical claims in its own marketing, expect the same with yours.)

How Do You Know If a Healthcare Marketing Agency Takes HIPAA Seriously?

Ask them straight out: will you sign a Business Associate Agreement?

Under HIPAA, any vendor that creates, receives, stores, or transmits protected health information for you needs a BAA. For a marketing agency, that usually comes up with call recordings, form submissions that include health details, access to patient records in your CRM, or uploading your patient list for a reactivation email campaign. Plenty of agency work never touches PHI, like writing blog posts or managing Google Ads keywords. But as soon as an agency asks for your patient list, you need to have the BAA conversation.

You want an answer like: “Yes, for these specific services, and here’s where PHI does and doesn’t flow.” This answer should worry you: “We don’t need one, we’re a marketing company.”

Then ask how they handle tracking pixels. Agencies that came from e-commerce often get this wrong. The Meta pixel and similar tags can send visitor data to ad platforms when they sit on appointment request pages, patient portals, or pages about specific conditions. HHS issued guidance on online tracking technologies in December 2022 and updated it in 2024. In June 2024 a federal court vacated part of that guidance, the part about unauthenticated public pages. The risk didn’t go away with it. Tags inside logged-in areas like patient portals are still clearly covered. And the FTC’s 2023 enforcement actions against GoodRx and BetterHelp were both about health information reaching advertising platforms.

A good agency will have a view on this. They might use server-side tracking or an analytics setup built with HIPAA in mind. Or they might keep ad pixels off any page where people enter health information. You don’t need to follow the technical details. You need to hear that they thought about it before you asked.

Last, ask how they handle advertising rules. State medical boards regulate before-and-after photos, testimonials, outcome claims, and words like “specialist.” In the US, Google requires LegitScript certification before you can run ads for addiction treatment. An agency that says “we’ll handle all the compliance” is overpromising. A better answer sounds like “we know the common rules, we flag risky claims, and your counsel signs off on anything borderline.” Treat all of this as a starting point, and have your own healthcare attorney review the BAA itself.

What can go wrong: the bad version usually shows up as a patient complaint or a demand letter. By then the pixel may have been firing for a year.

Ask What They Report On (and What Happens When It Drops)

Leads are cheap. Booked patients are expensive. Agencies know this, and it’s why so many monthly reports lead with impressions, clicks, and form fills.

analytics dashboard laptop

Ask each agency for a sample monthly report. Then ask them to point to the one number they’d want to be judged on, and compare it to this:

What they report What it tells you What to ask for instead
Impressions and reach Your ads were shown. It says nothing about patients. Cost per booked appointment
Clicks and traffic People visited. Some are bots, some are job seekers. Share of visits that turn into appointment requests
Leads and form fills Someone raised a hand. Many never answer the phone. Lead-to-booked rate, tracked in your CRM or practice management system
Keyword rankings You show up for a term, which may be one nobody searches. Calls and bookings from organic search and your Google Business Profile
Phone calls The phone rang. That includes existing patients and wrong numbers. New-patient calls, answered vs. missed, recorded under a BAA
Booked appointments Close to what matters. Show rate and revenue by service, where your systems allow it

That last row takes work on your end. Tying marketing data to your practice management system is rarely clean, and some platforms make it painful. A good agency will tell you honestly how close they can get to revenue tracking with your setup, and what they need from your front desk to get there. The best ones also ask about call handling. A lead that hits voicemail at 5:15 p.m. is a lost patient however good the ad was.

Then ask about timelines, because that’s where most overpromising happens. In our experience, paid search can start producing booked patients in the first 30 to 60 days once tracking is set up correctly. SEO is slower. Real organic movement usually takes four to six months, and longer in competitive metros. If an agency promises page one for “dentist near me” in a major city within 90 days, they’re telling you what you want to hear.

The last question here is my favorite: “Tell me about a client whose results dropped. What did you do?” Every agency has one. The ones worth hiring can tell you the story in detail, including what they got wrong.

Read the Contract for Four Clauses Before You Sign

Most of the pain in agency relationships traces back to the contract, and most practice owners skim it. Read these four sections slowly.

signing contract desk

Who owns the accounts?

Your practice should own its Google Ads account, Meta ad account, Google Analytics property, Google Business Profile, domain, and website. The agency gets access. If the agency sets up accounts under its own login, you lose your history when you leave. Years of conversion data in Google Ads is a real asset, and starting from zero costs you months.

Call tracking numbers are the sneaky one. Say the agency puts its tracking number on your Google Business Profile and website, and the number is registered to them. When you leave, your phone number changes everywhere patients have seen it. Ask for numbers in your practice’s name, or get a written promise to transfer them to you when you leave.

Term and termination

I’ll be a little contrarian here. A minimum term isn’t automatically a red flag. SEO takes months, and an agency on a month-to-month SEO deal has every reason to do quick, shallow work. A three- to six-month initial term for SEO is reasonable. A 12-month lock with no exit if results don’t show up is a different animal. Look for a 30-day cancellation clause after the initial term. Better still, get an exit tied to the number you wrote down in step one.

How ad spend is handled

Ask whether Google and Meta bill your card directly or whether spend runs through the agency. Running through the agency isn’t always bad, but it makes markups easy to hide. And if they charge a percentage of ad spend, their fee grows whenever your budget grows, whether or not results do. A flat fee, or a flat fee plus a performance bonus, ties their pay more closely to your results.

What you keep when you leave

Think landing pages, ad creative, reporting dashboards, email lists, and website files. Get in writing which of these stay with you. Some agencies build websites on their own platforms that you can’t take with you. With those, leaving the agency also means rebuilding your website.

What can go wrong: a practice signs a 12-month deal, results stall in month three, and the only way out is paying for the remaining nine months. Have your attorney read the contract, especially the BAA and cancellation terms. A few hundred dollars of legal review is cheap by comparison.

Meet the Person Who Will Run Your Account Day to Day

The person on the sales call is often not the person doing the work. A founder or senior strategist closes the deal, and a coordinator juggling 25 other accounts runs it. That setup can work. You should know about it before you sign.

medical office team meeting

Ask to meet your account manager and whoever builds the campaigns. Ask how many accounts each of them handles, which specialties they’ve worked in, and how often you’ll hear from them. Monthly reporting calls are standard. A named person who replies to email within one business day matters more than a fancy client portal.

A word on specialization. Healthcare experience matters, but it’s a blunt filter. An agency that mostly runs brand campaigns for hospital systems can be lost running cash-pay patient acquisition for a med spa or concierge practice. An agency that’s great with dental groups may not understand referral-driven specialties like GI or orthopedics, where a large share of new patients come through physician referrals. So ask about experience with your revenue model: cash-pay or insurance, elective or referral-driven, one location or several.

And watch what they push back on. If you say you want to double new patients in 60 days and they say “sure,” walk. An agency worth hiring will tell you which part of your plan they think is wrong, even if it costs them the sale.

Score Each Healthcare Marketing Agency Before You Decide

Once the calls and reference checks are done, score each agency on the ten items below. Give 2 points for a clear yes backed by evidence, 1 for a partial or vague answer, and 0 for a no or a dodge.

Criteria What a 2 looks like Score (0-2)
Asked about your capacity and target services before pitching They asked for your numbers without being prompted
Case studies include spend, time period, and what the metric counts Every result comes with context
Provided a former-client reference You spoke with someone who left
Showed a live reporting dashboard A screen share of the real thing
Will sign a BAA where PHI is involved Clear yes, plus a map of where PHI flows
Has a plan for tracking pixels on sensitive pages Named a specific approach
Reports on booked appointments or better Cost per booked patient is the main number
Gave realistic timelines Paid search in 30-60 days, SEO in months
Practice owns all accounts, phone numbers, and the website Written into the contract
Reasonable term with a real exit 30-day cancellation after the initial term

16-20: Sign, and schedule a 90-day review against the number from step one. 10-15: Go back to the agency with the specific gaps. Some of them, like contract terms and account ownership, are easy to fix if the agency wants your business. Under 10: Walk away, even if they’re the cheapest option.

The checking continues after you sign. In the first 30 days, confirm you have admin access to every account they set up. By day 60, you should see tracking that connects spend to booked appointments. At day 90, compare cost per booked patient to the baseline you wrote down before any of this started.

For what it’s worth, PatientProcure isn’t the right fit for every practice. If you need a one-time website rebuild and nothing else, a good web studio will do it for less. We work best with practices that want a steady, measurable flow of booked patients and are willing to tighten up their front desk along with their marketing.

If you want to see how we score, put us through this same scorecard. Book a free strategy call, bring your three numbers, and we’ll show you where your practice loses patients between the first click and the booked appointment.

Frequently Asked Questions

What questions should I ask a healthcare marketing agency before hiring them?
Ask what ad spend, time period, and practice size sit behind each case study, and whether their numbers count leads or booked appointments. Ask for a reference from a former client, whether they'll sign a Business Associate Agreement, how they handle tracking pixels on sensitive pages, and who owns the ad accounts and call tracking numbers. Also ask them to walk you through a client whose results dropped and what they did about it.
Does a marketing agency need to sign a BAA with my medical practice?
An agency needs a Business Associate Agreement if it creates, receives, stores, or transmits protected health information for your practice. That usually covers call recordings, form submissions with health details, CRM access to patient records, and uploading patient lists for email or ad campaigns. Work that never touches PHI, like writing blog content, may not need one. Have your healthcare attorney review any BAA before you sign.
How long should a healthcare marketing agency contract be?
A three- to six-month initial term is reasonable for SEO, because organic results usually take four to six months to show up. After that initial period, look for a 30-day cancellation clause. Be cautious with 12-month contracts that give you no way out if the agency doesn't perform, especially if you'd have to pay out the full remaining term to leave.
What are red flags when choosing a healthcare marketing agency?
Watch for case studies with no ad spend or time period attached, reports built around impressions and clicks instead of booked patients, and promises of page-one rankings within 90 days. Other warning signs: they won't sign a BAA while asking for your patient list, they set up your ad accounts under their own login, and your call tracking numbers are registered in their name. An agency that agrees to every goal you name without pushing back is a warning sign too.
How do I know if a healthcare marketing agency's results are real?
Ask for the specialty, practice size, monthly ad spend, time period, and exact metric behind every result they show you. Ask for a screen share of a live reporting dashboard for a current client, and ask to speak with at least one former client. Results that come with full context and hold up in reference calls are far more credible than a big percentage in a pitch deck.
Healthcare Marketing Strategy

What Makes Healthcare Marketing Different From Other Industries

Trust, compliance, and referral dynamics make healthcare marketing its own discipline. Here's what that actually…

Healthcare Marketing Strategy

What Does a Healthcare Marketing Agency Actually Do?

A plain-language breakdown of what a healthcare marketing agency handles day to day, from SEO…

Healthcare Marketing Strategy

The Complete Guide to Physician Social Media Management

How to build a social media presence for physicians that builds trust without creating compliance…

Call (917) 727-3503