Romas Dental Marketing
Instruments ready for a procedure at Palm Springs Dental

HIPAA

Dental marketing that's actually HIPAA compliant

Your ads keep bringing in inquiries, and what each patient writes when they ask for an appointment stays between your clinic and us.

  • $2,190,294the maximum HIPAA fine per year, for each type of violation
  • $12.2 millionpaid in 2024 by a hospital system to settle a lawsuit over patient data its website sent to Meta and Google
  • 0pieces of your patients' health data we send to Meta

Someone asks for an appointment because their upper teeth are missing. That's already health data, and Facebook has no business knowing it.

What others have already paid

Some agencies run a dental clinic's ads exactly like a pizza shop's. Nobody notices until the lawsuit shows up.

  • Advocate Aurora Health. A 27-hospital system. It paid $12.2 million in 2024 to settle a lawsuit over sending patient data to Meta and Google from its website and patient portal.

  • Novant Health. It paid $6.6 million in 2024 to settle a lawsuit over the same thing, a Facebook tool on its website and patient portal.

  • Your clinic. HIPAA fines go up to $2,190,294 a year for each type of violation. And your agency's mistake counts as yours.

Ask us where your patients' details end up today.

How we protect your patients

  • We're HIPAA compliant. Every inquiry is stored with the protection the law requires.

  • Meta gets no health data. No name, phone, email, answers or treatment.

  • Your campaign still learns. It knows which ad brought the inquiry, and nothing about the patient's health.

Every clinic we work with spells out in its privacy policy, with no fine print, what is shared with Meta and why.

HIPAA compliance doesn't cost you patients

The campaign looks for people who will ask for an appointment, not people who only click. And it finds them without learning a thing about their health.

  • About $10per patient inquiry
  • $11 × $1in treatments sold for every $1 of ad spend, in the first weeks of a campaign

Some of those stories are in the case studies.

See how many new patients your ad spend could bring in.

Ask your agency this

  • What does Meta get from each inquiry? If you hear name, phone or what the patient wrote, the risk is your clinic's.

  • Where is the patient's information stored? It has to be a HIPAA-compliant system. A personal chat or a spreadsheet isn't one.

  • Who on their team sees your patients' data? And whether they signed an agreement to protect it.

The short version is in HIPAA in your ads. If you're coming from another agency, see what to check when you switch.

This page is about marketing, not legal advice.

How many new patients will you have next month?

If you don't know what to answer, your advertising is still a bet. Run your clinic's numbers, or message us on WhatsApp and we put in the real ones on a 20-minute video call.