Medical website design and marketing: build the pages a patient books from, meet the HHS accessibility dates, and keep trackers off the intake form
What a US medical practice website needs to bring in patients, the WCAG 2.1 dates in the HHS Section 504 rule as amended in May 2026, the tracking and vendor rules that shape the build, and how to brief a designer.
Published by AI Knows Us · Updated 21 October 2026
Medical website design and marketing is one job, not two: the site exists to turn a search, a referral or a social post into a booked appointment. A good practice site has a page for each service and each clinician, booking or a phone number one tap away on a phone, accessible design that meets WCAG 2.1 Level AA, and no advertising trackers on pages where patients give health information. Design the site around those four things, then market it through local search, reviews and the content your clinicians can stand behind.
The pages a patient actually books from
Most practice websites are built as a brochure: home, about, services, contact. Patients do not read them that way. They arrive on one page from a search for a condition, a treatment or a doctor's name, and decide from that page alone. Build the site around those entry points.
| Page | What it must contain |
|---|---|
| One page per service | What the service is, who it is for, what happens at the visit, insurance notes, and the booking link |
| One page per clinician | Photo, credentials, board certifications, languages, locations, and the conditions they see |
| One page per location | Address, parking, hours, phone, the clinicians who work there, and a map |
| New patient page | Forms, what to bring, insurance accepted, how to transfer records |
| Insurance page | The plans you accept, in words patients search for |
A specialist practice with ten services, four physicians and two locations already needs about twenty pages of real content. That is the scope to give a designer, and it is where most of the cost sits.
Design choices that decide whether a visitor books
- Mobile first. Put the phone number and the booking button in the header of every page on a phone screen.
- Real photographs. The real clinicians and the real waiting room. Stock images of smiling doctors tell a patient nothing.
- Plain language. Write "knee pain" as well as "orthopedic sports medicine". Patients search in their own words.
- Fast pages. Compress images and keep heavy scripts off the pages that matter.
- Online booking that matches the schedule. If the scheduling tool shows times that are not real, patients call to complain instead of booking.
Accessibility: the HHS dates moved in May 2026
Practices that receive federal financial assistance from HHS are "recipients" under the Section 504 rule, and 45 CFR 84.84 sets a web standard for them. We read the current text in the eCFR on 21 October 2026. It requires web content and mobile apps to "comply with Level A and Level AA success criteria and conformance requirements specified in WCAG 2.1":
- from May 11, 2027 for a recipient with fifteen or more employees;
- from May 10, 2028 for a recipient with fewer than fifteen employees.
Those dates come from an amendment published on May 11, 2026 (91 FR 25507). Proposals written before that amendment may quote earlier dates, so check any that do. The rule covers content provided "directly or through contractual, licensing, or other arrangements," so a third party booking widget or patient portal on your site is part of the scope. The Section 1557 rule, at 45 CFR 92.204, separately requires covered entities to make health programs offered through websites and apps accessible. Ask your counsel whether your practice is a recipient. Either way, build to WCAG 2.1 AA from the start, because it is simpler than fixing a finished site.
What that means for a designer: enough colour contrast, every image with alternative text, forms that work with a keyboard and a screen reader, captions on video, and text that can be enlarged without breaking the layout.
Tracking, forms and the vendors who touch patient data
Marketing teams want analytics and ad pixels on every page. A medical site has to be more careful. Meta's Business Tools terms list prohibited information that must not be sent, including "diseases, medical conditions and injuries," "medical procedures, treatments and testing," and "physical locations that identify a health condition, or places of treatment and counseling" (Meta help article 361948878201809, read 21 October 2026). An event fired from a page called "book an HIV test" sends exactly that.
HHS's Office for Civil Rights has also issued a bulletin on online tracking technologies. A federal court vacated part of it on 20 June 2024, the part about IP addresses collected on public pages that do not require a login. Whatever your counsel concludes about public pages, the sound build keeps advertising pixels off intake forms, appointment flows and the patient portal, where the Meta terms above already rule out sending health details.
Any vendor that will "create, receive, maintain, or transmit" protected health information for you, such as a forms provider, a chat tool or a host that stores submissions, is a business associate. Under 45 CFR 164.502(e), the assurance that it will safeguard the data "must be documented through a written contract." Ask every vendor in the build whether it will sign a business associate agreement before you choose it.
This is general guidance, not legal advice. Your compliance lead or a healthcare lawyer should review the final tracking and vendor setup.
Marketing the site once it is live
Local search. Most new patient searches have a place in them. Google's Business Profile guidelines allow individual practitioners to have their own profiles, separate from the practice. Where a practitioner is one of several at a location, the practice profile and the practitioner's profile are separate, and the practitioner's profile title "should include only the name of the practitioner." Link each profile to the matching clinician or location page, not the home page. Our guide to SEO for healthcare providers covers the search work in depth.
Structured data. Schema.org has a Physician type and a MedicalClinic type, both with a medicalSpecialty property. Mark up each clinician and location page with the matching type, the address, the phone number and the opening hours.
Reviews. Ask every patient for an honest review after the visit. Do not offer anything for a positive one, which 16 CFR 465.4 bars, and never confirm in a reply that a reviewer is a patient.
Content. Short articles and videos from your own clinicians on the questions patients ask most, published on the service pages they belong to rather than a separate blog nobody visits.
How to brief a medical website designer
Send the page list above, your list of clinicians and locations, and your scheduling and portal vendors. Then ask four things. Will they build to WCAG 2.1 AA and show you the test results? Which scripts and pixels will run on which pages? Which of their tools will hold patient data, and will those vendors sign business associate agreements? Who owns the domain, the content and the design files when the project ends? A designer who answers those clearly has built for healthcare before.
Questions about medical website design
How many pages does a medical practice website need?
One per service, one per clinician and one per location, plus a new patient page and an insurance page. For most practices that is fifteen to thirty pages.
Does my practice website have to meet WCAG 2.1?
If your practice is a recipient of federal financial assistance from HHS, 45 CFR 84.84 requires WCAG 2.1 Level AA from May 11, 2027 with fifteen or more employees, or May 10, 2028 with fewer.
Can we use the Meta pixel on a medical website?
Keep it off any page where patients enter health information, book appointments or log in. Meta's own terms bar sending health information through its tools.
Should a medical website have online booking?
Yes, if it shows real availability. Booking that does not match the schedule creates more phone calls, not fewer.
Should each doctor have their own page?
Yes. Patients search by name, and a clinician page is what a practitioner's Business Profile should link to.
Where a new patient's search can start now
A patient looking for a dermatologist or a pediatrician can now ask ChatGPT, Gemini or Perplexity to suggest one nearby, and the answer names practices before anyone visits a website. Those answers are built from the public record: directories, reviews and the clinician pages described above. AI Knows Us is part of a new category that checks whether those assistants name your practice when a patient asks, and which sources they relied on.