Call tracking for clinics: what it does, and where it stops

Between 40 and 60% of healthcare conversions arrive by phone rather than through a web form. Any attribution built entirely around form submissions is therefore measuring the smaller half of the business, which is why call tracking is usually the second thing a clinic needs and the first thing it is sold.

It is genuinely useful. It also carries compliance obligations most practices do not realise they have taken on, and it stops well short of the thing you actually want to know.

What it does

The mechanism is dynamic number insertion. The tracking platform holds a pool of phone numbers, and shows a different one to each visitor depending on how they arrived. Someone from a Google ad sees one number, someone from organic search another. When a call comes in on a given number, the platform knows which session produced it.

Done properly, the advertising click identifier is attached to that session, which means a phone call can be tied back to a specific ad click in the same way a form submission can. That is the entire point, and without it the phone half of your revenue is attributable only to a guess.

The good implementations also capture call duration, whether it was answered, time of day, and whether it was a first-time or repeat caller. Duration in particular is a usable proxy: a nine-second call and a nine-minute call are different events and a raw call count treats them identically.

The compliance layer, which is not optional

Here is the part that gets skipped.

A patient call contains protected health information. So does a voicemail. So, in context, does the caller’s phone number, because a number tied to an enquiry about a specific treatment is health information about an identifiable person.

Any platform touching that data is a business associate and must operate under a signed Business Associate Agreement. Without one, a system handling call recordings, voicemails or caller numbers tied to health context is non-compliant by default. This is not a grey area and it is not resolved by the vendor describing itself as secure.

What a compliant setup requires, concretely:

• A signed BAA with the call tracking vendor
• Recordings encrypted in transit and at rest
• Audit logs retained for six years
• Role-based access control, so not everyone in the practice can play back every call
• PHI redaction in transcripts
• A defined retention period with automatic deletion, commonly 30 to 90 days

Two practical consequences. First, several well-known call tracking platforms will sign a BAA and several will not, and the answer changes by plan tier rather than by product, so it must be asked specifically. Second, call recording and AI transcription are separate decisions. Transcription means a second vendor processing PHI, needing its own BAA, and plenty of practices switch on an AI call summary feature without registering that they have just added a business associate.

If you cannot get a BAA, you can still run call tracking without recording. You lose the qualitative value and keep the attribution, which is the larger half of the benefit.

Where it stops

Call tracking tells you a call happened, how long it lasted, and which advertising produced it. It does not tell you whether that person became a patient, and it cannot.

That gap is larger than it sounds. A twelve-minute call from a serious prospect and a twelve-minute call from someone who was never going to book look identical in the platform. So does a call that booked a consultation nobody attended.

The platform sits before the CRM in the chain, and the outcome is recorded after. Closing that requires the call record and the patient record to be the same record, or reliably joined, which is integration work rather than a feature either vendor provides. Until that join exists you have channel attribution for calls, which is genuinely better than nothing and is not revenue attribution.

That distinction is the subject of healthcare marketing attribution, and the join itself usually depends on whether your CRM can hold the identifier at all, which is covered in what to ask a CRM vendor.

The number pool, which is where quiet failures live

The mechanism depends on having enough numbers. Each concurrent visitor from a tracked source needs their own, and when the pool is exhausted the platform starts reusing numbers that are still attributed to somebody else.

The result is not an error. It is an attribution that is confidently wrong, and it happens disproportionately during your busiest periods, which are the periods you most want to understand. A practice running a campaign that produces a traffic spike may find the attribution for that spike is the least reliable data it has.

Ask what pool size the vendor recommends for your session volume, and ask what happens on exhaustion. A vendor who answers precisely has thought about it. A vendor who says it will be fine has not.

What “answered” means, and the calls nobody counts

Call tracking reports whether a call connected. It does not report whether it was handled.

The distinction matters in a clinic. A call that rang out at 6.15pm, a call answered by somebody who took a message, and a call answered by a coordinator who booked a consultation are three different outcomes and two of them look similar in most reporting. Missed calls in particular are frequently invisible to the practice while being extremely visible in the data, and they cluster at exactly the times you would expect: lunch, end of day, and the first hour of a busy morning.

If you are going to buy call tracking, the missed-call report is often worth more in the first month than the attribution is. It usually shows something nobody in the building knew.

Print, radio and the static number question

Practices frequently want a tracking number on a billboard, a leaflet or a vehicle.

That works differently. There is no session to attach, so a static number is assigned to that placement permanently. It tells you a call came from the leaflet, which is genuine information you could not otherwise get.

Two cautions. A number that appears in print will be saved by patients and called for years, so attribution to that placement drifts upward over time and eventually becomes meaningless. And a second number on your marketing materials creates a NAP inconsistency against your Google Business Profile if it leaks into directory listings, which is a local search problem you did not intend to create. Use them deliberately, keep them out of citations, and review the assignment annually.

What to ask before buying

1. Will you sign a BAA, on the plan I am actually buying?
2. Does the click identifier reach my CRM with the call record, or only your dashboard?
3. What is the retention period, and can I set it?
4. Can I run tracking without recording?
5. How large is the number pool relative to my traffic? Too small and two visitors share a number simultaneously, which silently corrupts attribution during your busiest hours, which are the hours that matter most.

When you do not need it

If almost all your enquiries arrive through forms, or your call volume is low enough that somebody could reasonably reconcile it by hand each month, call tracking is a solution to a problem you do not have yet.

The honest sequence is usually: fix form capture first, because it is free and it is probably broken; establish what proportion of enquiries actually arrive by phone rather than assuming the industry average applies to you; then buy call tracking if that proportion justifies the licence and the compliance overhead.

Buying it first is common, because it is the thing with a salesperson attached.