Hippo is HIPAA-compliant conversion tracking for solo and group practices. It counts the consult requests, calls and bookings your ads produce, and keeps client identities out of what the ad platforms receive.
No annual contracts.
Transparent pricing.
We set it up for you.

Therapy ads rarely end in a purchase. Someone clicks, reads your page, and then fills in a contact form, calls, or asks for a free consultation. Often the booking itself finishes somewhere your website can't see, like a SimplePractice(opens in a new tab) or TherapyNotes(opens in a new tab) portal.
That gap is why so many owners count a click on the "Book appointment" button and hope it means something.
What is worth counting:
What isn't:
If Google is optimising toward those, it is finding you people who browse.
Here is the sum with one owner's reported numbers.
One owner's reported numbers
Whether that is good depends on how long your clients stay, but it is a number you can make a decision with.
Try it with your own numbers. If you can't fill in the contacts, or can't say which campaign they came from, that is the gap Hippo closes. It records each consult request, call and booking and ties it to the campaign that produced it. Google's bidding also gets real client actions to learn from.

Owners describe paying for ads month after month without a way to connect the spend to new clients.
I've used them in the past but can't tell which referrals come directly from ads. Anyone here think they're worth it?
Over the last three months I’ve run multiple campaigns, set up for google search, optimized in all of the right way, sent to my website and also specialty pages, which are really awesome, and got one single client from it. Literally like 4000 spent, and almost nothing in return.
I have seen about 3-6 form submissions/calls per week from this spending amount. Converting approximately 1-4 of those 3-6 to clients.

The same owners know the usual tracking tools carry risk, and aren't sure what they are allowed to keep.
Trying to figure out how I keep access to my website analytics, google business page, etc. while remaining compliant. Stuck in a loop in my brain
While a settlement, this implies that using tracking pixels violates HIPAA. Lots of therapists potentially do the same on their small practice websites. Wish there was settled law on that.
It’s so hard to advertise effectively as a therapist when up against the corporatized therapy platforms. The savvy ones use services that scrape the HIPAA off the data to Google
If Google has put a "Health in personalized advertising" notice on your account, this is why. Google names mental health counseling as a sensitive interest category. Advertisers in it cannot use their own audience lists, which rules out Customer Match, remarketing lists and lookalike segments. Practitioners report that search campaigns keep running with a "limited" label.
Google's customer data policy adds a second limit. Conversions tied to sensitive categories cannot be measured with enhanced conversions, the feature many agencies switch on by default.
Meta's terms forbid sending it health information, and its help pages list mental health and psychological states by name. The rule covers event names too. An event called "anxiety consult booked" breaks it on its face. Meta also sorts health websites into a category that limits what their events may carry.
An event name, before and after
Sent without the visitor's
With audience targeting this narrow, the conversion signal is most of what you have left to steer a campaign. Hippo sends it with a neutral event name and without the visitor's name, email, phone number or IP address.
Federal
In June 2024 a federal court struck down the part of HHS's tracking guidance(opens in a new tab) that covered visits to public pages. The rest still stands, and contact, intake and booking pages are where a visitor says who they are and why they came.
Federal
It allows statutory damages of $10,000. This is the claim that survived dismissal in the LifeStance case.
State
The state's privacy law(opens in a new tab) sets $5,000 per violation, and the plaintiff does not need to show harm. It reaches any practice with California visitors, including telehealth.
State
The My Health My Data Act(opens in a new tab) covers website visitors who never become clients, and it requires separate consent before their health data is shared.
Federal
The agency ordered BetterHelp to pay $7.8 million(opens in a new tab) for sending intake answers and emails to ad platforms. It needed no HIPAA finding to do it.
$3,027,874.44
LifeStance Health agreed to a settlement fund of $3,027,874.44(opens in a new tab) over tracking on its website. One group in the class is defined as people who booked a session through the online booking tool on its public site. Final approval is pending, with a hearing set for October 16, 2026.
Up to $1.9 million
Thriveworks agreed to pay up to $1.9 million(opens in a new tab) in a separate case. That one involved Google and LinkedIn tags, with no Meta Pixel at all.
$650,000
Rogers agreed to a $650,000 settlement fund over claims that analytics tools, cookies and pixels on its websites sent visitors' web activity to Facebook and other companies without sufficient consent.
Settled, 2026
A January 2026 lawsuit said the Meta Pixel on its website sent visitors' page activity to Meta. Headlight settled with the plaintiff individually, and the case was dismissed in May 2026. The amount was not made public.
Pending
A 2026 lawsuit says Google tracking tools on its website sent visitors' mental health quiz answers to Google. The case is pending in federal court in Illinois.
The tools were ordinary.
They were the same tags an agency or a website template adds by default.
Nothing was hacked.
The claim was that the site passed along who was seeking therapy.
The laws behind these cases apply to any website that takes a booking.
See what your booking page sends to Google and Meta →(opens in a new tab)Book your appointment
Book now
Call us
Booking
Call
Records events
Removes identifying information
Sends clean conversion data
Excluded from conversion events
Names
Conditions
IP addresses
Clean conversion events only


Booking
Call
Take the Google and Meta pixels off your site.
Hippo records visits, bookings, and calls, then removes client names, health details, and IP addresses from the conversion events sent to Google and Meta.
Google and Meta receive conversion signals they can use to optimize your campaigns. Client names, health details, and IP addresses stay out of those events.
With the software you already use. Most practices we hear from run SimplePractice or TherapyNotes, often alongside Headway(opens in a new tab) or Alma(opens in a new tab). SimplePractice says its portals carry no third-party pixels, so nothing inside the portal reports to your ad accounts. Hippo records the request where it starts, on your own site, and picks up bookings from the scheduling tools you connect.
Hippo works with the ad platforms and website tools your practice already uses.
Hippo
See which campaigns led to consult requests and bookings, and what each one cost.

An independent record of results in an account you own. If you change agencies, it stays with you.

Calls that start from an ad are counted as conversions alongside forms and bookings.

A log of every event that went to Google and Meta and what was removed from it first.

Yes, with every customer.
Conversion events with names, emails, phone numbers and IP addresses removed. You can see each event that was sent.
Yes, on this page.
No. Month to month.
We set it up for you.
No. Event names are neutral.
Yes. The notice means Google has placed you in a sensitive category, which removes audience features such as Customer Match and lookalikes. It does not ban therapy ads. Agencies that manage therapy accounts say search campaigns keep serving with a "limited" label.
Google's certification rule applies to drug and alcohol addiction services. A general therapy practice is outside it. One therapist reported disapprovals because the landing page mentioned addiction services, so check the page your ads point to.
Google's own policies say no for sensitive categories, whatever HIPAA says. Client lists cannot be used for Customer Match, and health-related conversions cannot be measured with enhanced conversions.
Hippo captures the request on your website and connects to scheduling tools to pick up the booking. On a walkthrough we'll look at your booking flow and show you what gets recorded.
The pages where a visitor identifies themselves carry the most risk: contact, intake and booking. State wiretap and health data laws apply to the whole site, with or without HIPAA.
The laws used against LifeStance apply to any website, whatever the size of the practice. Law firms scan healthcare sites for tracking tags, and the page they look at is the booking page.
Yes, if you want to know how these laws apply to your practice. This page describes laws and court cases for general information and is not legal advice. Hippo handles the tracking; an attorney can advise you on your obligations.
$99/month
Month to month.
Start now, no demo call1,000 visitors/month(opens in a new tab)$199/month
Month to month.
Start now, no demo call2,000 visitors/month(opens in a new tab)$299/month
Month to month.
Start now, no demo call10,000 visitors/month(opens in a new tab)Server-side conversion tracking under a BAA, at a price a practice can actually pay.
See which campaigns bring new clients.
Connect campaign spend to intake inquiries.
Measure consultation bookings by campaign.
Understand what drives online bookings.
Compare acquisition across your campaigns.
See which campaigns drive consultations.
Know your cost per booked patient.
See which promotions get booked.
Connect campaign spend to appointments.
Measure calls and booking inquiries.
See which campaigns bring new patients.
Understand which campaigns drive inquiries.
Connect campaigns to appointment inquiries.
See which campaigns drive website inquiries.