Key takeaways
- Medical SEO New York work starts with trust: for health topics, Google says “trust is most important.”
- Show who wrote or reviewed each treatment page, and keep it accurate and dated.
- A solo doctor under a practice brand shares its Business Profile; at a multi-doctor location, the practice and each public-facing doctor can have separate profiles.
- HHS says tracking code on logged-in patient pages generally has access to protected health information. Review every tag with your compliance lead.
- Never buy or filter reviews, and never reply with details of a patient’s care.
Searching for a doctor, a dentist or a clinic is one of the most personal searches anyone makes, and Google treats it that way. Health pages are judged on trust, local results depend on profiles that match how the practice really works, and the website can collect sensitive data without anyone noticing. That is the starting point for any medical SEO New York plan, whether you run a single dental office or a group of clinics.
I have worked in SEO and digital marketing for more than 16 years, with clients remotely from Bucharest. This article explains what Google, HHS and the FTC publish about content, practitioner profiles, tracking and reviews, and how I would apply it to a New York practice.
One plain note before we start: this is not legal or compliance advice. I quote the official sources and explain what they mean for SEO work; your practice should check anything involving patient data or advertising with its own counsel or compliance lead.
Medical SEO New York starts with trust
Google’s guide to creating helpful, reliable, people-first content describes how its systems look at “experience, expertise, authoritativeness, and trustworthiness, or what we call E-E-A-T.” Two lines from it matter most for a medical website. First: “Of these aspects, trust is most important.” Second, for topics “that could significantly impact the health, financial stability, or safety of people”, Google says its systems give more weight to content with strong E-E-A-T.
The same page adds that “E-E-A-T itself isn’t a specific ranking factor”. There is no trust score or badge to buy. What you can do is make trust visible, in ways a patient can check.
Some of Google’s self-assessment questions read like a checklist for a clinic:
- “Is this content written or reviewed by an expert or enthusiast who demonstrably knows the topic well?”
- “Does the content have any easily-verified factual errors?”
- “Is it self-evident to your visitors who authored your content?”
- “Do pages carry a byline, where one might be expected?”
Google also says it strongly encourages “adding accurate authorship information, such as bylines” and warns to “avoid using deceptive authorship information.” For a practice, that rules out a common shortcut: a ghost-written article under a doctor’s name that the doctor never reviewed.
On a medical website, trust is not a tone of voice; it is a name, a qualification and a date that a patient can check.
Pages a practice needs, and how to write them
Many practice websites I audit have the same gap: one long “services” page that lists everything in a sentence each. A patient searching for a specific treatment finds nothing specific to land on. The structure I recommend:
| Page type | What it should contain | Trust signals to show |
|---|---|---|
| Treatment or service page | What it is, who it is for, what happens at the visit, how to book | Named clinician who wrote or reviewed it, date of last review |
| Condition page | Plain explanation, when to see a doctor, what the practice offers | Reviewer’s name and qualification, sources for medical claims |
| Practitioner page | Qualifications, specialties, languages, locations and days | Real photo, licence and board details the clinician is happy to publish |
| Location page | Address, hours, directions, which practitioners work there | Same details as the Business Profile, exactly |
Write each page for the patient, not for a keyword list, and never promise outcomes: “guaranteed results” and invented success rates lose patients’ trust long before they cost rankings.
If you are unsure which existing pages hold up, an SEO website audit is a sensible first step.
Provider profiles: one per practitioner and location
Local results for “dentist near me” or “dermatologist Brooklyn” come from Google Business Profiles, and practices are where profile rules confuse people most. Google’s guidelines for representing your business on Google have a section on individual practitioners that answers most questions.
What Google says, in short:
- A practitioner is “a public-facing professional, typically with their own customer base.” They can have their own profile if they “operate in a public-facing role” and “can be contacted directly at the verified location during stated hours.” Support staff should not have profiles.
- If a practitioner “is the only public-facing practitioner at a location and represents a branded organization”, Google says it is best to share one profile with the organisation, named “[brand/company]: [practitioner name]”.
- Where several practitioners work at one location, “The organization should create a Business Profile for this location, separate from that of the practitioner.” The practitioner’s profile title “should include only the name of the practitioner”.
- A practitioner “shouldn’t have multiple Business Profiles to cover all of their specializations.”
- Departments within hospitals “may have their own Business Profiles on Google” when they are public-facing and distinct, with a name and main category different from the main business.
For each location, list every public-facing clinician, check which profiles exist (including old ones set up by former staff), and match names, categories, hours and addresses to the website.
When a doctor works at several New York locations
This is common in groups with offices in, say, Manhattan and Queens. Google’s rule is about being contactable “at the verified location during stated hours”, so the profile follows the real working pattern, not the marketing plan. If a doctor sees patients in one office on Mondays and another on Thursdays, the practitioner page should say exactly that.
For the wider geography of the five boroughs, including service areas and why one profile cannot rank everywhere in the city, see our guide to local SEO in New York.
Tracking technologies on a medical website
This is the part most marketing teams skip. Analytics tags, advertising pixels, chat widgets and heatmaps are all, in HHS’s words, “a script or code on a website or mobile app used to gather information about users”.
HHS has published guidance on the use of online tracking technologies by HIPAA covered entities and business associates. The points that matter most for a practice’s website:
- Logged-in pages. “Tracking technologies on a regulated entity’s user-authenticated webpages generally have access to PHI.” A patient portal is the obvious example.
- Booking and symptom tools. Tracking on a public page that lets people “schedule appointments or use a symptom-checker tool without entering credentials may have access to PHI in certain circumstances.” HHS’s example is a tracker collecting an email address or reason for seeking care during booking: then the provider is disclosing PHI to the vendor, “and thus the HIPAA Rules apply.”
- Vendors. HHS says “Regulated entities must ensure that all tracking technology vendors have signed a BAA” (a business associate agreement) and that there is “an applicable permission prior to a disclosure of PHI.”
- Other law. Where HIPAA does not apply, HHS notes that the FTC Act and the FTC’s Health Breach Notification Rule may apply, for example to health apps.
Note the update at the top of the page. On 20 June 2024, a federal court in Texas vacated part of the guidance: the part saying HIPAA obligations are triggered when an online technology connects an individual’s IP address with a visit to an unauthenticated public page “addressing specific health conditions or healthcare providers.” HHS says it “is evaluating its next steps in light of that order”, and the page carries a disclaimer that it does “not have the force and effect of law”. That is why I explain the guidance but do not interpret it for your practice: your compliance lead or counsel decides.
Tracking review for a practice website
- List every tag, pixel, chat tool and embedded form, including those in a tag manager.
- Mark which pages each one runs on: public pages, booking, forms, portal.
- Check what each one sends to the vendor.
- Give the list to your compliance lead with the vendor names, so they can decide on agreements or removal.
- Repeat the review whenever someone adds a tool or changes the booking system.
Good SEO does not need advertising pixels on booking pages. I measure organic performance with Search Console, plus conversion counts your compliance lead has approved.
Reviews and privacy
Reviews help patients choose, but practices carry two special risks: fake or filtered reviews, and replies that reveal health information.
On the first, the FTC’s final rule banning fake reviews and testimonials, announced on 14 August 2024, prohibits creating or selling fake reviews, “providing compensation or other incentives conditioned on the writing of consumer reviews” with a particular sentiment, undisclosed reviews by officers, managers and employees, and suppressing reviews through threats or intimidation. For a practice, that means: ask every patient the same way, never pay or reward only happy patients, and never ask staff to post reviews without disclosing their connection.
On the second, HHS published a settlement with a New Jersey health care provider that provides adult and child psychiatric services. According to HHS, a patient’s complaint alleged that the provider “impermissibly disclosed the protected health information of a patient” when it “posted a response to the patient’s negative online review.” The provider paid $30,000 to HHS’s Office for Civil Rights.
A safe reply is short and general: thank the reviewer and invite them to call the office. Do not confirm that the person is a patient, mention dates, treatments or conditions, or argue the facts in public. Agree the template with your compliance lead once.
What I would check first on a New York practice website
Who wrote or reviewed each treatment page; whether every public-facing clinician has the right profile at the right location; which tags run on booking and portal pages; and whether anyone replies to reviews with details of care.
Dentists, specialists and multi-location groups
Dentist SEO in NYC follows the same rules as any other practice. Dental and specialist groups often have one strong location page and weak pages for the others. Each location needs its own page with its address, hours, practitioners and directions, matching its Business Profile exactly.
One of the New York healthcare clients I have worked with is Pain Therapy Medical Care, a pain management practice with clinics in Williamsburg and Flatbush in Brooklyn and in other parts of New York State. A group like that is exactly where each location’s page and profile has to stand on its own.
Healthcare brands with many sites often have too many profiles created over the years. Clean-up comes first: find duplicates and old practitioner profiles, and keep one owner account for the organisation.
If you are choosing someone to help with this work, our guide on how to find local SEO experts covers what to ask. For any healthcare business, add one question: “How do you handle tracking and patient data on our site?” A good answer starts with a list of tags and ends with your compliance lead, not with a new pixel.
Measuring results without tracking patients
What I use, with very little personal data:
- Rankings for treatment and location keywords, checked by borough or neighbourhood where it matters. Our article on city rank tracking explains how to check local positions.
- Search Console for queries, clicks and pages.
- Business Profile performance for each location.
- Bookings by source, counted in the booking system in a way your compliance lead has approved.
Report monthly by location and service line, without sending anything about a patient’s visit to an advertising platform.
FAQ
What is medical SEO in NYC?
Medical SEO in NYC is search work for practices, clinics and healthcare brands in the city: trustworthy treatment and practitioner pages, accurate Business Profiles for each location and public-facing clinician, a careful review process, and measurement that respects patient privacy.
What should New York medical professional SEO services include?
An audit of content and authorship, practitioner and location pages, Business Profile clean-up under Google’s practitioner rules, a tracking review shared with your compliance lead, and monthly reporting by location. They should never include fake reviews, invented credentials or guaranteed rankings.
How is dentist SEO in NYC different from other local SEO?
The rules are the same, but dental groups often have several locations and dentists who work across them. Each location needs its own accurate page and profile, and each dentist’s page should say where and when they see patients.
Does New York healthcare medical SEO need to follow HIPAA?
That is a question for your compliance lead or counsel, not for an SEO, and this article is not legal advice. What I can say is that SEO work touches booking tools, forms and tracking code, which HHS’s guidance on online tracking technologies addresses, so involve them early.
If you run a practice or clinic in New York and want to know where your website and profiles stand, send me your site and locations and I'll tell you what I would check first.
Eugen Platon · SEO consultant with 16+ years in SEO and digital marketing · free 10-minute first call