Tracking pixels on booking pages: what US and Canadian regulators have said

Two ways a booking reaches an ad platform

Most exposure comes from the first pattern in the figure above. A pixel on the booking page sends the page address, browser identifiers and sometimes form fields straight to the ad platform. Nobody reviews them first. The second pattern matches privately. Only the outcome leaves.

US guidance still covers booking forms

In June 2024, a federal court in American Hospital Association v. Becerra struck down one part of the HHS guidance. That part treated an IP address plus a visit to a public page about a condition as protected health information. HHS dropped its appeal in August 2024.¹²

Everything else stands. That includes tracking on logged-in pages and on pages that collect identifying health information. A booking form with a name, contact details and a visit reason sits close to that line. We treat it as protected, as most law firms advise.

Many providers are covered by HIPAA without thinking of themselves that way. Submitting claims electronically makes a provider a covered entity.³ That includes most dental, physio, optometry and hearing practices.

Settlements are landing on booking pages

The LocalMed case is the one to read twice. The booking tool was embedded in dentists' own websites, and the vendor was sued.⁷ Vendors count. Whatever runs on your booking page is your exposure, whoever wrote the code.

Courts are reading health information broadly too. In October 2026 a federal appeals court revived a pixel case against an eyewear retailer.⁹ The FTC has banned GoodRx and BetterHelp from using health data for advertising after each shared it with ad platforms.⁴⁵

Canada asks for consent first

The Office of the Privacy Commissioner says browsing health-related websites is sensitive information. Using it for remarketing requires express consent.¹⁰ A 2014 finding against Google remarketing on a health search set that position.¹¹

A 2023 finding against Home Depot is the closest Canadian case on conversion uploads, because sending hashed customer emails to Meta's offline tool needed express opt-in consent.¹² In Quebec, tracking that profiles people should be off by default.¹³

What we don't know yet: we found no Canadian regulator decision or class action about pixels on a clinic website. That gap is a reason for care. It isn't a reason for comfort, because the consent rules above already apply.

Four steps for any business that takes bookings

1. List every script on your booking, intake and account pages, including the ones a vendor's widget loads.
2. Remove service names, provider names and visit reasons from page addresses and page titles.
3. Send ad platforms only that a booking or sale happened, never what it was for.
4. Confirm your status with your privacy lead or counsel, and treat booking records as health information until they say otherwise.

The trade-off is fewer signals for the ad platforms. We think that's the right price. Measure results from your own records instead, as described in our research on Meta's health data limits.