Common Patient Acquisition Questions for Care Teams

What to take away

Common patient acquisition questions deserve operating answers, not channel slogans. Before comparing reach or cost, define the service, audience, owner, data, and end state; see the patient acquisition overview.

Which channels can a practice use?

Common routes include clinician and community referrals; organic search and Google Business Profile; paid search and social advertising; patient reviews; community outreach; and permission-based email campaigns. Choose channels based on service fit, access, capacity, and whether completed encounters can be linked to a source—not lead volume alone.

A customer relationship management (CRM) system can track inquiry stages, an electronic health record (EHR) or practice management system can confirm completed care, and call tracking can help identify phone inquiry sources. Use each tool for a defined purpose and check whether its data can be matched to the practice's acquisition definition.

Which rules apply to patient outreach?

The Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule generally requires written authorization before a covered entity uses or discloses protected health information for marketing, subject to specified exceptions. The Telephone Consumer Protection Act (TCPA) governs certain calls and texts; requirements depend on the message, technology, and consent. The CAN-SPAM Act applies to commercial email, and the Federal Trade Commission Act prohibits unfair or deceptive practices. State privacy, consent, and telemarketing rules may also apply.

When does an inquiry become an acquired patient?

Define an acquired patient as an eligible new patient who completes a first billable encounter, such as an office visit or procedure, at the practice. Keep inquiry, contact, screening, scheduling, confirmation, cancellation, no-show, completion, diversion, and duplicate states separate. Record referral source and consent to contact when a patient is referred.

Can a practice use email with patients?

HHS's Office for Civil Rights (OCR) explains that covered providers may use email for health-related communication with reasonable safeguards under HIPAA's Privacy and Security Rules. Safeguards include encrypted email, limiting content to the minimum necessary, and obtaining patient consent before sending unencrypted email. This guidance does not approve a marketing campaign or every vendor.

Should price information appear in acquisition content?

CMS's page for consumers explains the hospital price transparency information available for shoppable services. For example, the CMS hospital price transparency rule requires hospitals to post standard charges for 300 shoppable services, including 70 selected by CMS. Use the practice's own current price or estimate when publishing service information, and state what is included or excluded; patient responsibility can depend on coverage and individual circumstances. Other organizations should verify the rules, payer facts, estimates, exclusions, and likely impression that apply to their own service.

How should attribution be reported?

Use observed source fields and a stated model. Distinguish discovery, assisting contacts, final scheduling route, and verified care entry. Report unattributed and disputed records. A platform model describes how credit was assigned; it does not prove that one touch caused the outcome.

For example, a first-touch model assigns 100% of credit to the first recorded touch. The verified care entry is the completed first billable encounter in the practice management system.

How should acquisition cost and return be measured?

Calculate cost per acquired patient by dividing attributable campaign costs by eligible new patients who complete the first billable encounter defined above. State which costs are included, the measurement period, and the attribution model. Track inquiry-to-contact, contact-to-scheduled, and scheduled-to-completed conversion rates, along with the no-show rate for appointments missed without completing or canceling. Evaluate return using attributable collected revenue or contribution margin, and note that attribution does not prove causation; use the practice's own data rather than treating an unsupported benchmark as a target.

How should a practice document the answer?

The evaluation record should connect the campaign question to evidence: define the intended outcome before launch, preserve source data and campaign versions, and state the period and comparison method. A before-and-after change alone does not establish that a campaign caused more completed visits.

For outreach, record the consent source and scope, channel, message version, vendor, access controls, retention period, and withdrawal or suppression requests. Limit access to information needed for the work and document which laws and contract duties apply.

A useful answer names the decision owner, eligible population, evidence period, method, and action. Save the definition and date with the answer. Set the next review date and record rejected options.

If the same question returns, compare the records before changing the metric; this can reveal a changed population or source rather than new behavior. Before changing the metric, confirm the definition matches the medical practice marketing benchmarks your office can reproduce.

Common questions

Are all new patients equal in reporting?

No. Preserve service, location, eligibility, route, cost, timing, and completion differences without using sensitive segmentation for an improper purpose.

Should a practice buy patient leads?

Before buying, require the seller to document each lead's source, capture time, consent language, channel, and permitted uses. Define freshness, exclusivity, duplicate and refund terms, service and geographic fit, and how complaints are handled. Review TCPA consent for calls and texts, CAN-SPAM requirements for commercial email, and whether the vendor is a HIPAA business associate handling protected health information; use a business associate agreement when HIPAA requires one. Check the vendor's representations and data handling contractually; an assurance alone does not establish compliance or patient fit.

What should stop a campaign?

Stop for a material false claim, unsafe capacity, privacy failure, inaccessible route, serious complaint pattern, or another prewritten guardrail breach.