Pre-flight checklist · for telehealth operators
Before you scale spend, make sure spend is the answer.

Before you run paid ads.

Paid ads amplify a system that already works. In telehealth they also expose the parts that don't — an offer that doesn't convert, a team that can't absorb the volume, no reason patients come back, and tracking that can quietly leak patient data to ad platforms. Here's what should be true before you spend.

Ads are a megaphone.
If the room is empty,
a louder megaphone doesn't help.
Why ads amplify What to have ready The telehealth trap Checklist
Why ads amplify, not fix

Paid ads pour fuel on a fire. If there's no fire, you just burn money faster.

The reason founders hire an agency is almost always the same: "we need to run ads." But ads don't create demand — they amplify demand that already exists. If something is already pulling patients organically, paid makes it bigger. If nothing is pulling yet, paid just buys you expensive proof that the offer, the message, or the timing isn't ready.

It's worse in telehealth than in normal e-commerce, for two reasons. First, you can't quietly A/B your way to product-market fit while a clinician is on the hook for every patient you acquire. Second, the tracking setup that makes paid ads measurable is exactly the setup that, done the standard e-commerce way, leaks protected health information to ad platforms — the thing that has produced seven-figure FTC settlements. So "before you run paid ads" is not a soft, nice-to-have checklist. It's the difference between spend that compounds and spend that creates liabilities.

What has to be ready first

Six things that should be true before a dollar of spend.

You don't need all six perfect. You need to know honestly where each one stands — because paid ads will find the weakest one and bill you for it. Mark the ones you can defend today.

Real demand signal

Something is already pulling patients without paid — organic content, referrals, word of mouth, community trust. Demand that scales before paid channels is the evidence the market actually wants this. No organic pull is the loudest "not yet."

An offer that converts warm traffic

People who already know you convert at a baseline you can measure. If warm traffic doesn't convert, cold traffic won't either — you'll just pay more to learn the same thing. Differentiated positioning lives here.

Capacity to deliver

Your clinical team can absorb the volume inside the window you promise. Acquisition that outruns provider response breaks the experience for exactly the patients you paid to win. A staffing plan should back the spend, not trail it.

A retention engine

A defined path after the first visit: follow-up, reviews, referrals, reactivation. Without it, paid acquisition fills a leaking bucket — more spend just gets you to the same churn faster.

Compliant tracking

Conversions are measured without sending patient data to ad platforms: server-side, consent-gated, with identifiers and conditions stripped before anything reaches Meta or Google. And note: under Meta's health-and-wellness rules (effective Jan 2025), telehealth and pharmacy advertisers are restricted from sending purchase or add-to-cart data at all, and Pixel/CAPI access can be limited — so build for restricted signal from day one.

A measurement plan

You know platforms will undercount conversions once tracking is compliant — and that Meta restricts the funnel data health advertisers can send, so bottom-funnel purchase optimization may simply not be available to you. Plan to optimize on non-restricted signals (landing-page views, engagement, brand lift) and judge performance from your own systems, not the ad dashboard. Set that expectation before launch, not on day fourteen.

The mistake that gets telehealth brands fined

Normal e-commerce tracking is exactly what produced the FTC settlements.

GoodRx, BetterHelp, and Cerebral didn't get penalized through malice. They applied standard e-commerce practice — pixels on every page, hashed emails to the ad platforms — to a health funnel. In a regulated category, that standard practice is the violation. Here's the line between the setup that gets you in trouble and the setup that protects you.

The shortcut that creates liability

  • Meta/Google pixels firing on pages that reveal a condition or a booking.
  • Hashed email or phone sent to ad platforms ("hashing isn't de-identification," per the FTC).
  • Patient data living in a marketing CRM that has no BAA.
  • A checkout that publishes the product or condition name into a tracking layer.
  • Tracking on by default, with the privacy policy not matching what actually fires.
  • Optimizing to clicks, so the algorithm buys cheap traffic that never converts.

The setup that lets you scale safely

  • A wall between marketing tools and anything that identifies a patient.
  • Server-side conversions, de-identified, forwarded through a compliant intermediary.
  • Click identifiers only — no patient identifiers, no condition, in the payload.
  • Consent-gated by default; the policy matches exactly what fires.
  • Optimizing to the real downstream event (a completed, treated consult), not clicks.
  • Counsel reviewing the consent language and the data flow before launch.
From the funnels we've built

The gap before paid is rarely the ads.

In the telehealth funnels we've architected, the thing blocking a safe paid launch was almost never the creative. It was tracking that would have leaked patient data, a care team that couldn't yet absorb the demand, no retention engine to keep the patients spend would buy, or simply nothing pulling organically to amplify. Paid ads don't fix any of those — they make all of them more expensive and, in a regulated category, more dangerous. The health-data tracking that powers paid is now contested on four fronts at once: the FTC, HHS Office for Civil Rights, state attorneys general, and private class actions (the Meta Pixel / Video Privacy Protection Act suits, at $2,500 per violation, are now before the Supreme Court). Fix the system first; then let spend amplify it. (This is operator judgment, not legal advice — loop in privacy counsel before you launch.)

Run this before you set a budget

The pre-flight checklist.

Answer honestly for each box. A "no" isn't a reason to never run ads — it's the project to do first, before spend turns it into an expensive lesson. The last box is the one to take to your counsel, not your media buyer.

Print this. Check the boxes you can defend.

1. Demand

What is already pulling patients without paid spend?

If the honest answer is "nothing yet," what would create organic pull first?

2. Offer

What's your conversion rate from warm traffic (people who already know you)?

Is the offer differentiated, or interchangeable with the brand next to you?

3. Capacity

How many new patients per week can your clinical team treat in the window you promise?

What breaks first if volume doubles next month?

4. Retention

What is your defined path after the first visit (follow-up, reviews, referral, reactivation)?

Do patients come back — and do you know your repeat rate?

5. Compliant tracking

Can you prove no patient identifier or condition reaches Meta or Google?

Is patient data kept out of any marketing tool that has no BAA?

6. Measurement & sign-off

How will you judge performance once platforms undercount conversions?

Has counsel reviewed the consent language and data flow before launch?

Not sure you're ready to spend? Let's pressure-test it.

Bring your checklist. We'll find the box most likely to leak budget or create exposure, and build the plan to fix it before you scale — demand, funnel, capacity, retention, and a compliant tracking setup. That's the Growth and Scaling engagement. (Operator judgment, not legal advice — we'll flag where your counsel needs to weigh in.)

Book a strategy call
Sources

Reflects: Meta's health-and-wellness advertising rules (effective January 2025), which restrict the conversion data telehealth and pharmacy advertisers can send through Meta's tools and can limit Pixel/CAPI access; the HHS Office for Civil Rights bulletin on online tracking technologies (December 2022), under which sending identifiable health data to ad-tech vendors without a business-associate agreement is treated as a reportable breach; the FTC's enforcement on tracking pixels (GoodRx, BetterHelp) and its updated Health Breach Notification Rule (2024); and rising private litigation over Meta Pixel and Google Analytics under the Video Privacy Protection Act ($2,500 per violation), now before the U.S. Supreme Court (2026). Enforcement spans OCR, the FTC, state attorneys general, and private class actions at once. Platform policies and enforcement priorities change frequently; this is operator judgment, not legal advice — confirm current standards and consult qualified privacy, regulatory, and legal counsel before launching paid campaigns.