HIPAA-Compliant Analytics & Conversion Tracking for Primary Care Practices
From pediatric fevers to Medicare wellness visits, whole families use your website. minusPHI keeps your analytics and campaigns working — and keeps each family’s browsing where it belongs.
The exposure
One website, everyone’s health questions.
Primary care sees everything. So does the pixel.
The mother booking a pediatric visit, the father reading about blood-pressure medication, the grandmother checking flu-clinic hours — a family’s whole health picture flows through your website, and a tracking pixel ties each page to each person.
You’re a covered entity, and the exam-room standard is the standard patients assume everywhere your name appears. The website is the only place it’s been quietly broken.
Exam-room standards, website included.
The fix
De-identified before it ever leaves your website.
The appointment still counts toward your campaign. The family behind it stays anonymous.
What keeps working
Everything you advertise with today — untouched.
Modest local campaigns and GA4 reporting keep working exactly as they do today — attribution intact, identity removed before Google sees anything.
Facebook posts, community promos and your Google Business profile keep driving visits, and every conversion still counts — anonymously.
Portals, scheduling flows and confirmation pages are suppressed entirely — nothing sent at all. Marketing pages report as marketing; care activity reports to no one.
Beyond compliance
Trust is your entire franchise.
The whole family’s doctor. The whole family’s privacy.
Families stay with you for decades. Data leaks end that faster than bad medicine.
Primary care runs on accumulated trust — the same doctor for the kids’ checkups and the grandparents’ chronic care. Patients extend that trust to your website without thinking about it; a pixel quietly reselling their browsing breaks it without you knowing it.
minusPHI closes the gap: the confidentiality patients assume in the exam room now covers the website too, provably.
- A plain-language log of what was sent, hidden, or blocked
- Sensitive pages suppressed automatically — nothing sent at all
- Visitor "do not sell" signals honored, with receipts
Questions
The honest answers.
We barely advertise — is this still worth it?
Ads aren’t the only leak: Google Analytics alone sends identity-linked browsing to Google, and most practice websites run it. The free exposure scan shows in minutes what yours sends — if it’s clean, you’ve lost nothing but five minutes.
What about our patient portal?
Nothing is sent from portals, intake forms, scheduling flows or condition pages — those are suppressed entirely, not scrubbed. You’ll see marketing traffic in your analytics; nobody sees care activity.
Will the ads we do run still optimize?
Yes — for what matters. Appointment campaigns optimize on conversion events, delivered server-side with the click ID attached, so attribution keeps working. What you give up is visitor retargeting, which requires exactly the browsing data this product removes.
What does setup look like?
About five minutes: paste one script tag into WordPress, Squarespace, Wix, Webflow or a custom site. Conversions are detected automatically, and your first exposure report arrives the same day. No developer required.
The whole family trusts you. Include the website.
Start free — no credit cardFull protection is free for 14 days, then $99/month per website · Cancel anytime