The Right Medical Marketing Services for Your Center

A 2024 peer-reviewed audit of adolescent residential addiction treatment offers the clearest available measurement of how often advertised capacity does not match operational reality. Researchers identified 354 facilities that appeared, through the SAMHSA Treatment Locator or search-engine advertising, to serve patients under 18. When the researchers called, only 160 of those 354 facilities—45.2%—confirmed that they currently provided residential treatment to adolescents. Even among facilities the SAMHSA locator specifically listed as offering adolescent residential care, just 49.0% confirmed the service by phone ¹.

The study’s scope is narrow: one level of care, one age band, one point in time. It cannot be generalized to the full behavioral health market. What it can defensibly establish is that a meaningful share of publicly discoverable programs are marketing services their intake lines do not actually deliver on the day a family calls. That gap is where a well-audited program wins.

Two operational implications follow. First, every service page needs a quarterly reconciliation against current bed availability, licensed levels of care, accepted age ranges, and staffed modalities—signed off by clinical leadership, not marketing. Second, the discrepancy the researchers documented was surfaced through the same channel a payer or investigator would use: a phone call. Admissions coordinators should be treated as a live audit surface. If a coordinator has to hedge on a service the site advertises, the page is the problem, not the coordinator.

Dual-diagnosis is the single most oversold category on treatment-center websites. ASPE’s 2024 analysis of outpatient behavioral health facilities found that in 2020, 54% of outpatient mental-health facilities and 53% of outpatient SUD facilities operated a special program for co-occurring disorders—an increase of about 10 percentage points among SUD facilities since 2014 ¹⁴. Roughly half the field has a program. The other half markets like it does.

Even the 53% figure describes a facility that reports having a special program; it does not establish staffing intensity, prescriber coverage, fidelity to an integrated model, or measured outcomes. That distinction matters for two reasons. A service page that implies integrated psychiatric and addiction care without the licensed clinicians to deliver it invites substantiation scrutiny under the FTC’s health-claims framework, which expects competent and reliable evidence behind expertise and effectiveness claims ⁸. It also produces the wrong admissions. Families searching for dual-diagnosis capability convert on the promise, arrive for assessment, and then get referred out—burning acquisition spend and generating the review content that documents the mismatch.

The corrective is granular service-page architecture. Separate pages for co-occurring capability should specify which diagnoses the program actually treats concurrently, which prescribers are on staff, whether medication management runs in-house or through a partner, and which levels of care the integrated pathway spans. Ambiguity is the tell.

The FTC’s Health Products Compliance Guidance sets the operating standard for any outcome, expertise, or effectiveness claim a treatment center publishes: it must be supported by competent and reliable scientific evidence, and testimonials or expert endorsements cannot be used to communicate a claim the advertiser could not make directly ⁸. Success-rate percentages, completion-rate figures, and vague phrases like “industry-leading outcomes” are the categories most often unsupported and most easily challenged.

The “evidence-based” label carries the same exposure when used loosely. HHS’s ASPE report on contingency management, for example, describes the modality as effective when implemented with fidelity—specifying eligibility, incentive structure, and program-integrity safeguards ¹⁵. A page that lists contingency management as a service without describing how the program actually administers it makes a claim it may not be able to defend on inspection.

Three edits reduce most substantiation exposure without weakening the page:

1. Replace unsourced outcome percentages with the population, timeframe, and measurement method behind any figure the clinical team can defend, or remove the figure.
2. Attribute expertise to specific credentials and roles rather than to the organization in the abstract.
3. Describe evidence-based modalities in terms of what the program does, not what the literature claims for the modality generally.

The Monument case is often summarized as “a treatment company got fined for using the Meta Pixel.” That framing misses what the FTC actually alleged. The complaint described a data flow: Monument, an alcohol-addiction treatment service, disclosed personal and health information to third-party advertising platforms, including Meta and Google, through pixels and APIs without obtaining consumer consent. The proposed order banned the company from disclosing health information for advertising and included a $2.5 million civil penalty under the Opioid Addiction Recovery Fraud Prevention Act, suspended for inability to pay ¹⁷.

Two elements of that action matter for architecture decisions. First, the alleged violation was not the presence of a pixel; it was the transmission of identifiable health information through it. Any conversion event that fires on a page whose URL, form field, or event parameter reveals a user’s interest in SUD treatment can carry PHI into an ad platform’s servers. Second, Monument’s own privacy statements became part of the deception theory. When a site tells visitors their information is protected and the tag manager tells a different story, the gap between the two is itself actionable.

The operational read is straightforward. Every advertising tag, conversion API, offline conversion upload, and remarketing audience needs a documented data map showing exactly which fields leave the site, where they go, and under what legal basis. Marketing cannot own that map alone; it requires sign-off from privacy counsel and IT security.

HHS guidance on online tracking states that regulated entities must comply with HIPAA when using tracking technologies and must ensure disclosures of PHI are permitted by the Privacy Rule. Tracking vendors that receive PHI generally require a business associate agreement and applicable permission before receiving that information ¹⁶. A June 2024 federal court order vacated part of the underlying bulletin, which changes the interpretive posture but not the statute; the CMO’s job is to design for the Privacy Rule itself, not for any single guidance document.

The non-HIPAA perimeter needs equal attention. Symptom quizzes, chat widgets, insurance-verification forms, and mobile tools that fall outside HIPAA’s covered-entity boundary can still trigger the FTC’s Health Breach Notification Rule, which requires vendors of personal health records and related entities to notify affected individuals, the FTC, and in some cases the media following a breach of unsecured individually identifiable health information ²². HHS separately reminds organizations that they may face obligations under both HIPAA and the FTC Act, and warns against unsupported labels like “HIPAA Compliant” or “HIPAA Certified” ⁷. Consent language, retention windows, and vendor contracts for those tools belong in the same review cycle as the pixel map.

The Consumer Reviews and Testimonials Rule that took effect October 21, 2024 prohibits creating, selling, purchasing, or disseminating certain fake or false reviews and testimonials, and it authorizes civil penalties for knowing violations. The rule specifically covers insider reviews without disclosed material connections, reviews on websites controlled by the business that are presented as independent, and fake indicators of social-media influence ⁹. The FTC’s revised Endorsement Guides, issued in June 2023, sit alongside it and address incentivized reviews, employee-generated content, virtual influencers, and whether platform disclosure tools are clear and conspicuous enough to qualify as adequate disclosure ¹⁰.

For a treatment center, three practices carry the most exposure:

• Alumni testimonials produced in exchange for anything of value—discounted aftercare, gift cards, travel to a filming location—require a clear and conspicuous disclosure of that material connection.
• Reviews written or coordinated by employees, admissions staff, or their family members require the same.
• Any claim a testimonial communicates about outcomes, staff expertise, or treatment experience must meet the same substantiation standard as if the center said it directly ⁸.

Operationally, that means a documented testimonial-intake process: written consent that also satisfies HIPAA marketing authorization for patient-identifiable content, a log of any consideration provided, a review of every claim against clinical evidence, and a standing prohibition on incentivized or employee reviews on third-party platforms. Agency and influencer contracts should carry the same terms and an indemnity when they don’t.

Star ratings are the least useful part of a review file. A 2021 systematic analysis of online reviews of substance-use-disorder services demonstrated that review text can be coded and analyzed as structured data about patient and family experience—access, communication, staff behavior, facilities, and perceived treatment quality—rather than treated only as a sentiment score ⁴. The reviewers are self-selected and cannot verify clinical claims, but the recurring themes they surface are the same objections admissions coordinators hear on intake calls.

The higher-value use of review data is diagnostic. Themes that appear repeatedly across a facility’s own reviews and its direct competitors’ reviews indicate where service pages, FAQs, insurance explanations, and admissions scripts are failing to preempt a real concern. A month of coded reviews often surfaces two or three revisions to a service page that move assessment-scheduling rates more than another round of headline testing.

Response protocols still matter, but they belong downstream of that analysis. Public responses should acknowledge without confirming or denying that the reviewer was a patient, since doing so is a disclosure of PHI absent authorization ⁶.

Lead volume is the wrong denominator. It rewards traffic that never becomes a patient and, worse, incentivizes the exact behaviors the FTC is now prosecuting: broad keyword bidding, aggressive routing, and call-center scripts that soften identity to keep a caller on the line ^{18, 19}. A defensible funnel starts one step deeper and ends one step later than most dashboards do.

Five stages carry the analytical weight:

1. Qualified inbound call
2. Verification of benefits completed
3. Clinical assessment scheduled
4. Assessment attended
5. Admission

Each stage needs a definition the clinical, admissions, and finance teams sign off on before the reporting layer is built. A qualified call is not a call over 90 seconds; it is a call from a prospective patient or family member for a level of care the facility actually offers, on a payer the facility actually accepts, in a geography the facility actually serves. When those three filters run at the top of the funnel, downstream conversion rates stop moving in ways nobody can explain.

The table below reframes each funnel stage against the KPI most marketing dashboards report today. It uses only variables the CMO already owns internally; no external benchmarks are asserted.

Two operational consequences follow. Admissions data has to flow back into the marketing warehouse under a BAA, not screenshotted from the EHR into a slide. And source attribution has to survive an FTC inquiry: which ad, which keyword, which call, which coordinator, which admission—each linked, each retained.