Addiction treatment marketing runs on rules before it runs on budgets. Google and Meta won't run a treatment ad until the program is LegitScript-certified and approved. Federal confidentiality rules for substance use disorder (SUD) records reach further than HIPAA, and paying anyone per patient can be a federal crime.
This page maps those rules to each marketing channel for outpatient, IOP (intensive outpatient) and MAT (medication-assisted treatment) programs, with the official source linked at every step. The short version: get certified before you plan ads, keep patient information out of marketing tools, and pay vendors a flat fee, never per admission.
What people search when they look for treatment
People search by level of care or by medication, close to home, and often in a hurry. These are the largest US searches with usable data:
| Search (US, monthly) | Volume | Avg. CPC |
|---|---|---|
| methadone clinic near me | 22,200 | $15.96 |
| detox near me | 14,800 | $107.39 |
| iop near me | 14,800 | $55.21 |
| suboxone doctor near me | 9,900 | $60.81 |
Google Ads Keyword Planner data via DataForSEO, US, 12-month average to Sep 2026. Top-of-page bids for "detox near me" ranged from $21.89 to $105.63.
Three things stand out:
- Searches name a service. People type "IOP" or "Suboxone doctor", not "behavioral health solutions". You need a page for each service you actually provide, described in those words.
- Detox clicks are expensive. At $107.39 a click, a few days of unfiltered "detox near me" traffic can use up a month's budget. If you don't offer withdrawal management, that term isn't yours to buy.
- Some numbers are missing on purpose. Google returned no data for "rehab near me", "drug rehab near me" and "alcohol rehab near me" because the category is restricted. Treat any volume quoted for those terms with caution.
The rules first: LegitScript, 42 CFR Part 2 and patient brokering
Three rule sets shape every channel. Learn them before you hire anyone or spend anything.
| Rule | Who sets it | What it controls |
|---|---|---|
| LegitScript certification | A private certifier that Google, Meta, Microsoft Ads and Nextdoor rely on | Whether you can run treatment ads at all |
| 42 CFR Part 2 | HHS (SAMHSA and the Office for Civil Rights) | Confidentiality of SUD patient records, including inquiries |
| Patient brokering laws | Congress (EKRA) and states such as Florida | Paying or receiving anything of value for referrals |
42 CFR Part 2
42 CFR Part 2 (opens in a new tab) covers "federally assisted" programs that hold themselves out as providing SUD diagnosis, treatment or referral. Federal assistance is broad: Medicare participation, DEA registration to dispense controlled substances for SUD treatment, federal funds and tax-exempt status all count. Private practitioners who hold themselves out as SUD providers can be covered too.
The 2024 final rule was published on February 16, 2024, took effect April 16, 2024, and set a compliance date of February 16, 2026 (opens in a new tab). Per the HHS fact sheet (opens in a new tab), it allows a single patient consent for treatment, payment and health care operations, applies HIPAA breach notification to Part 2 records and replaces Part 2's old penalties with HIPAA's enforcement authorities.
The marketing detail most programs miss: Part 2 defines a patient (opens in a new tab) as anyone who "has applied for or been given" SUD diagnosis, treatment or referral at a Part 2 program. An admissions form, an insurance-verification request or a chat can therefore create a protected record.
Patient brokering
The federal Eliminating Kickbacks in Recovery Act, or EKRA (18 U.S.C. § 220 (opens in a new tab)), makes it a crime to knowingly and willfully pay or receive remuneration for referrals to a recovery home, clinical treatment facility or laboratory, for services covered by a health care benefit program. Penalties reach $200,000 and 10 years in prison per occurrence.
States add their own. Florida's Patient Brokering Act (opens in a new tab) makes any violation a felony with a mandatory fine starting at $50,000, rising to $500,000 when 20 or more patients are involved. Florida's deceptive marketing statute (opens in a new tab) separately bans false information about a provider's services or location and requires call-center lead generators to disclose which providers pay them.
The FTC can also seek civil penalties for unfair or deceptive practices involving SUD treatment, referrals and recovery housing under the Opioid Addiction Recovery Fraud Prevention Act of 2018 (opens in a new tab).
This is general information, not legal advice. Confirm how it applies to your practice with a qualified advisor.
Why Google and Meta require certification for treatment ads
Treatment ads are restricted because a person searching "detox near me" is vulnerable, and a click is worth over $100 to whoever answers. Certification keeps unlicensed operators and referral sellers from buying that moment.
Google. Its Healthcare and medicines policy (opens in a new tab) "restricts the promotion of recovery-oriented drug and alcohol addiction services." In the US, advertisers must be certified as an addiction services provider through LegitScript and approved by Google. In Canada, Google requires LegitScript's Addiction Treatment Certification. The addiction services page (opens in a new tab) lists clinical providers, sober living, crisis hotlines and "lead generators or referral agencies for addiction services" as covered.
Meta. Its addiction treatment policy (opens in a new tab) requires advertisers targeting the US to be "certified with LegitScript" and to "have written permission from Meta". It covers in-person treatment, hotlines, mutual support groups and online treatment such as recovery apps.
LegitScript. Its addiction treatment certification (opens in a new tab) is open to licensed providers in the US and Canada. Lead generators, call centers and marketers paid to refer patients aren't eligible. Its standards cover licensing, staff qualifications, website accuracy, privacy compliance, no ownership of or affiliation with lead generators, and limits on patient incentives (paying for travel disqualifies an applicant).
Our LegitScript certification guide walks through the application.
Ethical intake: call centers, lead buying and referral fees
Most enforcement in this field targets the path between the ad and the admission. Run intake as if a regulator will listen to your calls.
| Practice | Why it's risky | Safer alternative |
|---|---|---|
| Paying a vendor per admission or per qualified call | Remuneration that varies with referrals is the core of EKRA and state brokering laws | A flat monthly fee for defined work |
| A call center that answers for several programs | Callers may not know who they're talking to; Florida requires disclosure of paying providers | Your own staff, or a vendor answering only in your name under a written agreement |
| Free travel, gift cards or "scholarships" tied to admission | LegitScript disqualifies paid travel; inducements raise brokering risk | Publish costs, insurance accepted and financial assistance rules plainly |
| Ad pixels on admissions or insurance-verification pages | Inquiries can be Part 2 records; HHS warns tracking on scheduling pages can involve PHI | No third-party ad tags on intake pages; aggregate reporting only |
| Confirming a caller's relative is "in treatment" | Part 2 lets programs acknowledge a patient's presence only with written consent | Scripted responses that neither confirm nor deny |
On tracking, HHS's online tracking guidance (opens in a new tab) was partly vacated by a federal court on June 20, 2024 (American Hospital Association v. Becerra), for unauthenticated pages that only connect an IP address to a health topic. Its points on scheduling, intake and portal pages still stand, and Part 2 adds its own consent rules on top.
Referrals from physicians, hospitals, courts and employee assistance programs are valuable. Earn them with reliable admissions, quick feedback to the referrer (with the patient's consent) and nothing of value changing hands.
Outpatient, IOP and MAT programs: messaging that respects patients
Good treatment messaging is specific, calm and free of promises. Say what you offer, who it fits, what it costs and what happens on the first call.
- Describe the service literally. "IOP: three-hour sessions, three evenings a week, 8 to 12 weeks" beats "comprehensive recovery journey". For MAT, name the medications you prescribe and whether you're in-network for them.
- Never promise sobriety or quote success rates you can't substantiate. The FTC can penalize deceptive SUD treatment claims, and Google's misrepresentation policy (opens in a new tab) bans claims that entice users "with an improbable result".
- Don't address the reader's condition. Meta's personal attributes policy (opens in a new tab) bans ads that assert or imply a health condition.
- Use person-first language. "People with opioid use disorder", not "addicts".
- Speak to families as well as patients. Many calls come from a parent or partner; give them a page explaining what they can and can't be told.
Illustrative example (fictional Ridgeview Outpatient): Avoid: "Struggling with drinking? Get sober in 30 days, guaranteed. Free transportation!" Prefer: "Evening IOP for alcohol use disorder in Dayton. Most commercial plans accepted. Speak with our admissions team."
If therapy is the center of your practice, our guide to therapist marketing covers caseloads, directories and ethics codes. Practices led by psychiatrists who prescribe buprenorphine alongside other care should also read psychiatry practice marketing.
Your website and Google listing: accuracy over volume
In this category, accuracy is the ranking strategy. Certifiers, platforms and families all check whether what you say matches what you are.
- Website. One page per level of care you're licensed for, your real address, license and accreditation details (only those you hold), clinical staff credentials, insurance and self-pay options, and what the first call covers. LegitScript checks that your site's address and services are accurate.
- No "closest center" tricks. Don't build city pages for towns you don't serve or imply a local office you don't have. Florida bans false information about a provider's geographic location outright.
- Google Business Profile. Google's guidelines (opens in a new tab) require your real-world name (no keywords such as "Detox Near Me"), a real location where you see patients (no virtual offices), one profile per location, and they exclude lead-generation agents.
- FindTreatment.gov. FindTreatment.gov (opens in a new tab) is SAMHSA's locator for substance use and mental health facilities. SAMHSA says designated representatives in each State Mental Health Agency and Single State Agency update facility status and location; check your listing and contact them if it's wrong.
- Reviews. Never confirm that a reviewer is or was a patient. Part 2 restricts acknowledging a patient's presence (opens in a new tab) without written consent, and HIPAA applies as well.
Guides for addiction treatment providers
- 42 CFR Part 2 explained: which records it covers, the 2024 final rule, consent, and what it means for web forms, analytics and CRMs.
- Rehab advertising rules: Google, Meta and LegitScript requirements, tactics that get programs banned, and what treatment keywords cost.
- Vetting a rehab marketing agency: red flags, data agreements, contract ownership and the questions to ask on the first call.
- Patient brokering laws: EKRA, state laws like Florida's, and which marketing arrangements raise risk.
- AI marketing for addiction treatment: AI assistants, AI-written content and lead-gen vendors, and what must stay out of AI tools.
What Medfy can and can't do for treatment programs
Medfy is AI marketing software for independent medical practices in the US and Canada. For treatment programs, the limits matter more than the features:
- Medfy does not provide LegitScript certification and cannot get a program certified. Its Google Ads and Meta ads add-ons don't change the rule: no certification and platform approval, no treatment ads.
- Medfy's commitments cover HIPAA-protected data under a BAA, the Business Associate Agreement Medfy signs with every practice. Handling of 42 CFR Part 2 records is not confirmed, so this page makes no Part 2 claim. Substance-use intake (admissions forms, insurance verification, chat about a person's use or treatment) should stay in your program's own Part 2-compliant systems.
What fits today is the free marketing audit. It reads public information only, scores your website, SEO, Google listing, AI visibility, social and ads, and flags privacy risks such as pixels on patient forms. If you then want to compare plans, Medfy pricing lists every price.
Frequently asked questions
Can addiction treatment centers advertise on Google?
Only after certification. In the US, Google requires addiction treatment advertisers to be certified as an addiction services provider through LegitScript and then approved by Google; in Canada it requires LegitScript's Addiction Treatment Certification. Lead generators and referral services fall under the same policy, and not every service is eligible. Until you are approved, put the effort into your website, your Google Business Profile and your FindTreatment.gov listing.
What is LegitScript certification and who needs it?
LegitScript is a private certifier whose addiction treatment certification Google, Meta, Microsoft Ads and Nextdoor rely on before they allow treatment ads. Licensed providers in the US or Canada, including outpatient, residential, detox and MAT programs, are likely eligible; lead generators, call centers and paid referral marketers are not. It reviews licensing, staff, website accuracy, privacy compliance and patient incentives, and it charges an application fee plus an annual fee.
Does 42 CFR Part 2 apply to marketing?
Indirectly, yes. Part 2 protects records that identify someone as having applied for or received substance use disorder care at a covered program, and an admissions form, call or chat can create such a record. Ad pixels, CRMs and call vendors that touch those inquiries therefore need the right agreements and setup. Part 2 doesn't govern ad copy itself; Google, Meta, the FTC and state laws do.
Is it legal to pay for patient referrals to a rehab?
Generally no. The federal Eliminating Kickbacks in Recovery Act (18 U.S.C. § 220) makes it a crime to knowingly pay or receive remuneration for referrals to treatment facilities, recovery homes or labs, with fines up to $200,000 and up to 10 years in prison per occurrence. States such as Florida have their own patient brokering laws. Per-admission marketing fees are the classic risk, so ask a healthcare attorney first.
How do outpatient addiction programs get patients ethically?
By being easy to find and honest once found. Build a page for each level of care, keep your Google Business Profile and FindTreatment.gov listing accurate, and earn referrals from clinicians, hospitals and community partners without paying for them. Answer calls with your own staff, publish what you accept and what to expect, apply for LegitScript certification before planning paid ads, and pay vendors flat fees, never per admission.