Patients usually find a practice on a phone, in the map results, before they ever see a website. That's why the highest-return hour in medical local search costs $0: claiming and completing your Google Business Profile. Paid help has its place—our audit sprints run $1,500–$3,500 and monthly local search work runs $500–$1,500—but a practice that hasn't done the free part first is buying the roof before the foundation.
Here's the order that actually works, and one trap specific to medicine that costs practices more than bad rankings ever will.
Where patients actually find a practice
Three places, roughly in order: the map results at the top of a local search, their insurance company's provider directory, and a referral from another human that they then look up to verify. Your website is usually the last stop, confirming a decision that was mostly made somewhere else.
That changes the priority list. A beautiful site that nobody reaches because your profile is thin is a common and expensive mistake. Get findable first, then get convincing.
Start with the free thing
Your Google Business Profile is the listing that feeds the map results. Claim it, then fill in every field—practices routinely leave half of it blank:
- The exact practice name, address, and phone, matching your signage
- Hours, including how holidays and half-days actually run
- Category, set precisely: "pediatrician" and "family practice physician" pull different searches
- Every provider, if the profile type allows it
- Real photos of the building, entrance, parking, and waiting room
- A link to the page that lets someone book or request an appointment
The photos matter more than they sound. A patient's real question is often "will I find the entrance and somewhere to park"—especially for older patients, and especially downtown, where a practice's door isn't obvious from the street.
The consistency problem practices have worse than anyone
Search engines cross-check your name, address, and phone number across directories. Practices accumulate mismatches faster than any other local business: providers come and go, suites get renumbered, a billing address ends up in a directory, an old fax line lives on somewhere, and health directories copy each other's stale data for years.
Pick the exact form of your name, address, and phone that you'll use everywhere, then work through the places you're listed and fix them. It's tedious, unglamorous, and reliably one of the highest-return things on this list. Insurance directories deserve special attention: they're both a ranking signal and a place patients search directly, and they're often the most out of date.
Reviews—and the HIPAA trap in replying to them
Reviews move local rankings and they move patients. Ask for them plainly, in person, at the end of a good visit—the ask works better from a person than a text.
Now the part that gets practices in genuine trouble. A public reply that confirms someone is your patient, or says anything about their visit, is a disclosure of protected health information—and the rules don't permit it without that patient's signed, written authorization. This is not a technicality. A reply saying "we're sorry your visit with Dr. Lee ran long" has confirmed, to everyone, that this named person saw a particular doctor on a particular day. A kind tone doesn't change that: what matters is what the reply reveals, not how warmly it's worded. And the reviewer posting about it first doesn't give you permission—federal regulators have fined practices from $10,000 to $50,000 over replies to reviews the patients wrote themselves. Of one such case the regulator said plainly: this practice is illegal under HIPAA.
The safe pattern is short and generic: thank them for the feedback, state a general commitment, and give a phone number and a name to continue offline. Say nothing that confirms or denies that this person was ever in your building. Every staff member with access to the profile needs to know this rule, because the person who replies is rarely the person who read the policy.
One scope note, because it catches people out: HIPAA reaches you if you bill insurance electronically, yourself or through a billing service. A pure cash-pay practice that never does may fall outside it. New York reaches you anyway—revealing identifiable patient facts without prior consent is professional misconduct for a physician, and the same prohibition covers your licensed staff. That one follows the license, not the billing.
And never buy reviews or offer anything in exchange for them. Beyond the platform rules, it's a bad look in a field where trust is the product.
What your website has to do to support it
Once the profile is doing its job, the site's job is confirmation, fast:
- A page for each provider, with credentials and a real photo
- The insurance list, current, in text a search engine can read—not a PDF, and not a picture
- Whether you're accepting new patients, stated plainly
- Location, parking, and accessibility details
- An obvious way to book or request an appointment
- Speed on a phone connection, above all
That's a straightforward practice website; our cost guide for practice sites covers what that runs and what to ask a builder. The general SEO cost guide covers how to tell real search work from a monthly report.
One caveat: I'm not a lawyer, and this isn't legal advice—particularly on the review-reply question, where the safe habit above is worth confirming with your counsel.
What this costs, and when to hire
The profile, the consistency cleanup, and asking for reviews are free and mostly within reach of a motivated office manager. Do them first, and give it a couple of months.
Hire when you've done that and still don't appear, when you're in a crowded market like Albany where the free basics aren't enough on their own, or when nobody on staff has hours to spare. In our pricing that's a $1,500–$3,500 audit and foundation sprint, or $500–$1,500 a month for ongoing work.
Practices near Glens Falls, Queensbury, Saratoga Springs, and Albany can have that conversation in person. Our local SEO service starts free, and so does the rest of our work with practices—including the honest version of this advice, which is that some practices should go do the free list and call back in a month.