Home / Websites / Analytics and pixels
The browser - not the form host
Analytics and pixels on a medical marketing site
The inquiry form can sit on a HIPAA host and still leak context through the page around it. GA4, a Meta pixel, and session replay see URLs, titles, and IP. That is a different job from HIPAA forms. This is not legal advice. It is the decision we make on a public marketing site.
The rule we use
- Keep PHI out of the URL. No symptom slugs, no "lab-results" paths that a pixel will fire on.
- The public marketing site is not the chart. Booking and "what is BHRT" pages are not a place to dump a medical history into a consumer pixel.
- A vendor that will not sign a BAA does not get events that look like health information.
- Session replay is not "just analytics." It can record the form the patient thought was private.
If counsel wants GA4 off the site, it comes off. We do not argue marketing into a HIPAA argument.
Send the live URL
We will list the scripts on it and what they can see. You decide with counsel.
One call. Real numbers. No pressure.
Call/text: (817) 583-1874 - Email: chris@marketmedical.io