Skip to main content
CareScope
Privacy

The Tracking Pixel Problem

Marketing tags on a patient-facing website can transmit more than anyone intended. It is one of the few privacy issues you can fully resolve in an afternoon.

CareScope Editorial/August 27, 2026/2 min read

The short version

  • Third-party tags on scheduling, symptom, or portal pages can send identifiable browsing signals to advertising platforms.
  • The exposure usually comes from a marketing vendor, not a clinical system.
  • An inventory of what loads on your patient-facing pages is a one-afternoon fix.

Why it matters

Website tracking has produced a steady stream of healthcare enforcement actions and class actions, almost all with the same origin: a tag added for legitimate marketing reasons on a page where patients disclose why they are seeking care. The practice usually did not know the tag was there.

How this happens

A marketing agency adds analytics and ad conversion tags across the whole site, which is normal practice everywhere else on the internet. On a healthcare site, some of those pages carry meaning. A visit to a page about a specific condition, combined with an identifier that platform already holds, can amount to a disclosure nobody authorized.

What to check

  • List every third-party script that loads on your site, especially on scheduling, symptom, condition, and portal login pages.
  • Remove advertising and social tags from those pages entirely. Keep aggregate analytics only where it does not carry condition context.
  • Confirm whether your portal login sits on your domain and whether anything else loads alongside it.
  • Ask your marketing vendor, in writing, which platforms receive site data and under what agreement.

The reasonable middle ground

This does not mean abandoning measurement. Aggregate traffic reporting on general pages is fine. The line worth holding is that no third party should learn which condition a visitor was reading about, or that a specific person requested an appointment.

This is one of the rare privacy problems with a clean ending. You can remove the tags and be finished.

The CareScope take

Get the tag list this week — your marketing vendor can produce it in an hour. Strip advertising tags from scheduling, condition, and portal pages, and document what stayed and why.

Then add a standing rule: nothing new loads on patient-facing pages without review. This class of exposure returns quietly during the next website refresh.

Sources

  1. Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates — HHS Office for Civil Rights
  2. Breach Notification Rule — HHS Office for Civil Rights
  3. American Hospital Association v. Becerra, No. 4:23-cv-1110 (N.D. Tex. June 20, 2024) — U.S. District Court, Northern District of Texas

CareScope cites primary sources — regulators, standards bodies, and published research — wherever a claim depends on them. Reporting is editorially independent and is not legal advice.

privacy · website · vendors

The CareScope Briefing

A practical briefing for practice leaders.

Each week, we cover one development affecting healthcare now and one issue worth preparing for next.

Email only. No account, no sales calls, unsubscribe whenever you like.