# How Do You Track Which Ads Drive Patient Phone Calls Without Sharing PHI?

Reviewed October 8, 2026 · By Michael Borgia, MedScale Health

## Short answer

As of October 2026, track patient calls by tying each call to the ad click and sending the platform only a neutral conversion, never the recording, the transcript or the reason for the call. Google forwarding numbers count calls over a minimum length, and Google keeps call recording off for businesses it identifies as healthcare unless the advertiser turns it on. MedScale Health, a paid acquisition agency for telehealth brands and clinics, keeps recording off and reports booked calls.

## What this means for you

- Google tracks calls five ways: calls from ads, calls to a number on your site, clicks on a number on your mobile site, clicks on call ads and assets, and imported call conversions.
- Calls from ads and calls to your website number count once they pass a minimum call length you set.
- Google turned call recording on by default for AI lead scoring, but says it stays off for businesses identified as healthcare unless the advertiser turns it on. Check the setting and keep it off.
- In a covered clinic's hands, a patient call, its recording and its transcript are health information. A vendor that records or stores calls for the clinic needs a BAA.
- The ad platform gets a neutral event matched to the click, such as a booked appointment. Not the caller, the number or the reason for calling.

MedScale Health, a paid acquisition agency for telehealth brands and clinics, sets up call conversion tracking for clinics whose patients book by phone. This page explains what Google's call tracking records, what never goes to an ad platform, and how a call is tied to the ad that earned it. This page is marketing guidance, not medical or legal advice. Platform policies change, so check the sources listed at the end before acting on a specific rule.

## How Google counts calls

- Calls from ads: calls made from call ads, call assets or location assets through a Google forwarding number. You set a minimum call length, and shorter calls are not counted.
- Calls to a phone number on your website: a Google forwarding number replaces your number on the site for visitors who came from an ad, with the same minimum length.
- Clicks on a number on your mobile website: Google says it can track only the click, not the call.
- Clicks on call ads and assets without a forwarding number: counted on Google's estimate of whether a meaningful call followed.
- Imported call conversions: calls tracked in another system, such as a CRM, then imported, so you can count only the calls that led to a sale, with their values. Google says this also requires Google forwarding numbers.

With call reporting on, Google assigns a forwarding number to your ads and records call duration, start time, whether the call connected, and the caller's phone number for calls over 15 seconds (except in India). Caller ID still reaches the clinic. For website calls, Google suggests testing by clicking your own ad, which is a charged click, and deleting the gwcc cookie between repeated tests.

## Call recording: check that it is off

Google's help page says the call recording setting is now enabled by default to allow AI-powered lead qualification, with two exceptions: it stays off if you turned it off before, or if your business was identified as operating in healthcare or financial services. Those advertisers can switch it on at any time by accepting the Call Ads Supplemental Terms. With recording on, Google's AI evaluates the recordings, and call reports carry an AI summary and tags such as #ConsultationScheduled. Recording is available only for calls between numbers in the US and Canada.

Do not rely on being identified as healthcare. Open Admin, then Account settings, then Call ads, and confirm Call recording is Off. Google says that without recording, it falls back to call duration to count conversions, which is the setting a clinic wants.

## Why the call itself is PHI

HIPAA's definition of health information in 45 CFR 160.103 covers information whether oral or recorded in any form or medium, created or received by a health care provider, that relates to a person's health or care. A call to book a fertility consult or to ask about a medication is that kind of information, and the caller's number identifies the caller. In a covered clinic's hands, the recording, the transcript and a call log tied to a patient are PHI.

Under 45 CFR 164.502(e), a covered entity may let a business associate create, receive, maintain or transmit PHI on its behalf only with satisfactory assurances, documented in a written agreement. HHS's tracking bulletin applies the same rule to tracking vendors and says disclosures of PHI for marketing need the patient's authorization. So a call tracking platform that records, transcribes or stores calls for the clinic needs a BAA, and nothing from those calls goes to an ad platform.

## Tying the call to the click

- The landing page keeps the ad click ID (gclid, fbclid or msclkid) for the visit.
- The clinic's call system, under a BAA, shows that visitor a tracking number and links the call to the stored click ID.
- When the call becomes a booked appointment, the system or your server sends a neutral conversion, such as Schedule, with the click ID, the time and an agreed value. Google says auto-tagging is what makes importing conversions from a CRM possible.
- Calls placed straight from a call ad or call asset have no website visit. Count those with Google's forwarding number and a minimum call length, with recording off.

What never leaves the clinic: the caller's number or name, the recording, the transcript, the reason for calling and any front desk note. Meta's prohibited information rules bar health information from anything sent through its Business Tools in any case.

## Why booked calls, not all calls

A minimum call length filters hang-ups and wrong numbers, but a long call can still be a billing question or a job applicant. Optimising on calls that turned into booked appointments gives the bidding a cleaner target, and Google describes imported call conversions the same way: counting only the calls that led to sales, with their values.

## What MedScale does

MedScale Health sets up call tracking for clinics in this order: confirm Google call recording is off, set call conversions with a minimum length for calls straight from ads, tie website calls to the ad click through the clinic's call system under a BAA, and report booked calls by campaign each week. MedScale tracks server-side under a BAA with neutral event names, and no names, emails, phone numbers, IP addresses or browser IDs go to any ad platform. Book the free growth audit at medscale.health/audit and we will check your call setup.

## FAQ

**Is Google Ads call tracking HIPAA compliant?**

Google's forwarding numbers log each call's duration, time and, for calls over 15 seconds, the caller's number. Keep call recording off, send nothing about the patient, and have counsel review the call routing for your practice.

**Does Google record calls to healthcare advertisers?**

Google made call recording the default for AI lead scoring, but says it stays off for businesses identified as healthcare or financial services unless the advertiser turns it on. Check Admin, Account settings, Call ads, Call recording.

**Do call tracking vendors need a BAA?**

If the vendor records, transcribes or stores patient calls for a covered clinic, it handles PHI on the clinic's behalf, and 45 CFR 164.502(e) requires written assurances, which is the BAA. Without one, don't route patient calls through it.

**How do you track phone calls from Facebook ads for a clinic?**

The same way as website calls from Google: keep the fbclid from the landing visit, link the call to it in the clinic's call system, and send Meta a neutral Schedule event server-side with the click ID once the appointment is booked.

**What call length should count as a conversion?**

Google lets you set the minimum, and shorter calls aren't counted. Pick a length that screens out hang-ups at your front desk, then move to imported booked calls so the campaigns optimise on appointments rather than call time.

## Sources

- [Google Ads Help: About phone call conversion tracking](https://support.google.com/google-ads/answer/6100664?hl=en) (checked October 8, 2026)
- [Google Ads Help: Tracking calls to a phone number on a website](https://support.google.com/google-ads/answer/6095883?hl=en) (checked October 8, 2026)
- [Google Ads Help: About call reporting](https://support.google.com/google-ads/answer/2454052?hl=en) (checked October 8, 2026)
- [Google Ads Help: Manage your call recording settings and eligibility](https://support.google.com/google-ads/answer/16913427?hl=en) (checked October 8, 2026)
- [Google Ads Help: About auto-tagging](https://support.google.com/google-ads/answer/3095550?hl=en) (checked October 8, 2026)
- [45 CFR 160.103: definitions of health information, individually identifiable health information and PHI (eCFR)](https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-160/subpart-A/section-160.103) (checked October 8, 2026)
- [45 CFR 164.502(e): disclosures to business associates (eCFR)](https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.502) (checked October 8, 2026)
- [HHS OCR: Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates (with the June 20, 2024 vacatur notice)](https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/hipaa-online-tracking/index.html) (checked October 8, 2026)
- [Meta Business Help Center: About prohibited information](https://www.facebook.com/business/help/361948878201809) (checked October 8, 2026)

## Related

- [AI Intake for Clinics: What Does It Change for Paid Ads?](https://medscale.health/answers/ai-intake-for-clinics-explained)
- [What Are the Advertising Rules for Med Spas and Aesthetic Clinics on Meta and Google?](https://medscale.health/answers/aesthetic-clinic-advertising-rules)
- [Which Google Ads Keywords Can a Psychiatry Practice Use?](https://medscale.health/answers/psychiatry-practice-google-ads-keywords)
- [Is Email and SMS Marketing HIPAA Compliant for a Clinic?](https://medscale.health/answers/hipaa-email-sms-for-clinics)

Canonical page: https://medscale.health/answers/tracking-patient-phone-calls-from-ads