Therapist Marketing: Fill a Caseload, Keep Privacy Tight

A full caseload comes from replacing the clients who finish treatment, not from a constant stream of new names. Three routes can do that work: a directory listing, an insurance panel, or your own website with search and ads, and each one earns its keep only by how many consults become clients who stay past the first few sessions.

Quick answer

Start with your own caseload math: weekly session slots divided by how many weeks a client typically stays gives the new clients you need each week. Run two or three routes at once and put a required source field on your intake form so each route earns its own consult-to-client rate. Keep pages that name a condition, your booking calendar and your intake form free of every ad pixel and analytics tag. Count a consult as booked or not; never let its reason reach an ad platform.

How many new clients does your caseload actually need?

Count your clinical hours in a week and divide by your session length, buffer included: that gives your weekly session slots, your real capacity.

Next, pull from your records how many weeks a client typically stays before ending treatment, averaged over recent months. Divide your weekly slots by that average: the result is how many new clients you need to start each week just to hold the caseload steady. Multiply by roughly 4.3 for a monthly figure. This assumes weekly sessions; if most clients come every other week, double the slots before dividing.

Which of the three routes actually earns a client?

Measure the directory and the panel like ads, by the share of consults that became ongoing clients rather than by inquiries: ten consults and two ongoing clients beats thirty and one.

What should never touch your booking page or your ads?

Keep condition names, specialties and treatment approaches out of any URL, page title or form label an ad tag or analytics script can read. A URL like yoursite.com/anxiety-therapy-intake tells Google or Meta exactly why that visitor is on your site, the kind of combination HHS's tracking bulletin addressed.

HHS wrote that bulletin for HIPAA covered entities: providers who submit HIPAA transactions such as claims electronically, with psychologists among CMS's examples (CMS, checked 2026-10-05). The bulletin said a tag tying the IP address of someone's device to their visit to a page about specific health conditions, or one listing providers, was by itself enough to count as individually identifiable health information if the visit related to that person's own health. In American Hospital Association v. Becerra, decided June 20, 2024, a Texas federal court declared that rule, which it called the "Proscribed Combination," unlawful as issued "in clear excess of HHS's authority under HIPAA," and vacated it (court order, checked 2026-10-05).

A footnote says the vacatur does not limit the bulletin's other guidance, and HHS's page marks only that portion as vacated. What remains: tags on pages behind a login, such as a client portal or telehealth platform, generally have access to PHI (protected health information, health details that identify a person), and a tag on a page where someone books an appointment can make its vendor a business associate that needs a signed business associate agreement, or BAA (HHS, checked 2026-10-05). So the booking page and intake form stay tag-free after the ruling too.

What did the FTC order BetterHelp and Cerebral to stop?

The FTC charged both companies with sending health details to ad platforms. In July 2023, it finalized an order requiring BetterHelp to pay $7.8 million for partial consumer refunds, over charges that it disclosed consumers' email addresses, IP addresses and health questionnaire information to Facebook, Snapchat, Criteo and Pinterest for advertising after promising to use or disclose health data only for limited purposes. The order bans BetterHelp from sharing consumers' health data for advertising (FTC, checked 2026-10-05).

In April 2024, the FTC announced a proposed order against Cerebral, filed in court by the Justice Department, over sensitive data on nearly 3.2 million consumers, including names, medical and prescription histories and health insurance information, that its tracking tools passed to third parties such as LinkedIn, Snapchat and TikTok. The order would permanently ban Cerebral from using or disclosing personal and health information to third parties for most marketing or advertising purposes. It also requires more than $7 million: nearly $5.1 million in refunds over Cerebral's cancellation practices, and a $10 million civil penalty suspended after $2 million because the company could not pay in full (FTC, checked 2026-10-05).

What can Google and Meta actually target for a therapy practice?

Google's personalized advertising policy counts "counseling services for mental health issues like depression, anxiety, and addiction" as health content, a sensitive interest category. Ads in it can't use advertiser-curated audiences (Customer Match, your data segments such as remarketing lists, lookalikes, audience expansion), because Google says they may inadvertently contain sensitive user signals; its predefined audiences stay usable (Google, checked 2026-10-05). Keyword targeting is not among the audience types it names, so a search ad on "therapist near me" sits outside this rule, while a remarketing list of visitors to your anxiety page sits inside it. The rest is in Google's healthcare ad rules for practices.

Meta's terms for its custom audience tool say an audience's name and the criteria behind it cannot include, reflect, imply or be based on health information or other sensitive categories (Meta, checked 2026-10-05). A custom audience named after a diagnosis, or built from a list of people who inquired about a specific condition, would break that rule even if the ad itself never says the word.

How do you count a consult without sending health details anywhere?

Give your ads a landing page and, if your call volume justifies it, a phone number used only in that campaign (the boundary I draw for a medical practice). Mark the landing page noindex so it never shows up in unpaid search, where it would mix ad traffic with everyone else's.

At intake, record only that a consult was booked and, later, whether it became an ongoing client: a status, not a reason. Nothing about the presenting concern, a diagnosis or session notes should exist in whatever system reports back to an ad account. If you ever upload results to Google Ads to improve bidding, the upload should carry a click identifier, a date and a yes-or-no outcome, nothing else; a system that needs more than that to work is asking for information it has no reason to hold. If clients book online, check that the booking tool keeps each booking's source; patient scheduling software lists what else to check.

This is how I set measurement up, not legal advice; I am not a lawyer. Have a healthcare attorney, or whoever handles HIPAA for your practice, approve what leaves it.

How does one quarter add up for a solo practice?

Illustrative: every number below is made up for a one-clinician counseling practice that does not exist, and no client of mine supplied any of them.

Weekly session slots: 24 (a 24-hour clinical week, 50-minute sessions plus a 10-minute buffer). Clients come weekly. Average length of stay in treatment, from the practice's own records: 14 weeks. New clients needed weekly to hold the caseload: 24 ÷ 14 = 1.7, so about 7.4 a month (× 4.3) and about 22 across a 13-week quarter (1.71 × 13).

Across the quarter: 24 new ongoing clients, two more than the caseload math calls for. The directory's cost per ongoing client is $89.85 ÷ 9, about $10; the ad campaign's is $3,391.50 ÷ 7, about $485. That gap alone does not say to drop the ads. Set $485 against what an ongoing client pays over a 14-week stay, and ask whether the directory and the panel could have filled those seven openings without them.

What to ask before you sign with a directory, a panel or an agency

• What does a listing or campaign cost in writing, with no fee hidden inside the ad budget?
• Will the vendor's reporting show consults and ongoing clients from my own intake records, or only inquiries and clicks?
• Which of my pages will carry a tracking tag, and does any name a condition or sit in my booking or intake flow?
• If the vendor ever touches identifying information, will it sign a business associate agreement, and if it cannot (Google offers none for Google Analytics), what stays off those pages instead?
• For an insurance panel, how long does credentialing take, and can I see the payer's fee schedule before I commit staff time?