Skip to content

Patient acquisition · Comparison

Healthcare lead generation: buying leads vs building your own

Healthcare lead generation compared: pay-per-lead vendors, directories, ads and your own website — lead quality, data ownership, HIPAA and real costs.

By Medfy Editorial TeamUpdated Facts verified 7 min read

Every new patient starts as an inquiry: a call, a form, a chat or a booking request. Healthcare lead generation is how you get those inquiries, and you can buy them from pay-per-lead vendors, directories and booking marketplaces, or generate them yourself through ads you control, your website and your Google listing. This page compares the options on what vendors rarely discuss: whether the lead is exclusive, who owns the data, what HIPAA exposure you take on, and what a new patient really costs.

The ways practices get leads today

Searches for this topic come mostly from people selling it. The clicks are expensive:

Search (US, monthly)SearchesAvg. CPC
healthcare lead generation90$53.32
healthcare lead generation services40$194.50
healthcare lead generation companies70—

Google Ads Keyword Planner data via DataForSEO, US, 12-month average to Sep 2026.

A $194.50 click means vendors compete hard for practice owners. Here is how the five main sources compare.

ItemPay-per-lead vendorDirectory or booking marketplaceGoogle search adsMeta adsYour website and Google listing
Cost modelFee per lead, sometimes a minimumSubscription, per-booking fee or bothPay per click, plus managementPay per impression or click, plus creativeWebsite and staff time; no per-lead fee
ExclusivityExclusive or shared, by contractListed beside competitorsExclusive: the patient contacts youExclusiveExclusive
Data ownershipSet by the vendor's contractSet by the platform's termsYou hold the inquiryLead-form answers collected on Meta, then passed to youYou hold the inquiry
HIPAA exposureVendor may be a business associatePlatform may hold patient dataKeep pixels off forms; no patient listsLead ads can't ask health questionsYour forms and vendors need BAAs
Lead-quality signalsVendor's intent filter, refund rateReviews and booking flowThe search term the patient typedAd engagement onlyWhich page and service they contacted about
Your effortLow to start; fast follow-up neededLow to mediumMediumMedium to highHigh to build, low to run

Last verified October 22, 2026. The table describes common business models and platform policies, not any named vendor; contract terms vary.

Pay-per-lead vendors: how they work and what to check

A pay-per-lead vendor runs its own ads, websites or call lines, collects inquiries from people looking for care, and sells them to practices. Prices are set per lead, and the lead may go to you alone or to several practices at once.

Before you sign, get written answers to these:

  1. Exclusive or shared? If shared, how many practices receive the same person?
  2. How was consent captured? What did the person agree to on the vendor's form, and does it cover your practice calling or texting them? Consent rules apply to calls and texts.
  3. Refund policy for bad leads. Wrong number, out of area, wrong service, duplicate: which are credited, and how fast?
  4. Data rights. May the vendor resell or reuse the information after it reaches you?
  5. BAA. Will the vendor sign a Business Associate Agreement if it handles patient information on your behalf?
  6. Pricing model. Per lead, per qualified lead or per booked appointment? See pay-per-lead pricing models for how these compare.

When buying leads is the better fit

Buying leads can make sense when you need volume fast: a new provider with an empty schedule, a new location, or a service you are launching. Set a test budget, track every lead to a booked first visit, and compare the patient acquisition cost with your other channels after 60 to 90 days.

Directories and booking marketplaces

Directories list you among competitors; booking marketplaces add real-time scheduling and charge a subscription or a fee per booking. Patients like the convenience, and some marketplaces bring patients who would never have found your site.

The trade-offs: the patient's first relationship is with the platform, your listing sits next to competitors, and fees can apply to patients who would have found you anyway. For specific options, see Zocdoc alternatives for practices.

When a marketplace is the better fit

When your website can't take bookings yet, when you are new to an area, or when your specialty's patients habitually start on a marketplace. Keep your own booking path strong at the same time so returning patients book with you directly.

Ads you control: Google and Meta

With ads, you buy attention, not leads. The patient contacts you directly, so every inquiry is exclusive and yours.

  • Google search ads reach people who typed what they need. Under Google's personalized advertising policy (opens in a new tab), health is a sensitive category, so you target by keywords and location rather than uploaded patient lists.
  • Meta ads reach people before they search, which suits cash-pay, elective services. Meta's Advertising Standards (opens in a new tab) bar lead-ad forms from requesting health information, such as medical conditions or treatments, or insurance information, such as the insurer's name, without Meta's prior written permission. Send people to a HIPAA-compliant form on your site instead.

Your website and Google listing as the lead engine

The leads you generate yourself carry no per-lead fee, aren't shared with competitors and arrive with context: the page and service the person contacted you about. The work is front-loaded: a fast site with a page per service, a complete Google Business Profile, steady reviews, and forms that are HIPAA-compliant.

Medfy is built for this route. Its base plan includes your website rebuilt on your own domain with HIPAA-compliant forms, a patient CRM and inbox that puts every form and message in one place, and first-party analytics that count calls, forms, bookings and directions by channel. Google Ads management and Meta ads with AI creatives are available as add-ons, and ad platforms never receive patient data. A free marketing audit scores your website, SEO, Google listing, AI visibility, social and ads, so you can see how much demand you are already leaving on the table.

Lead quality: what to measure

Cost per lead flatters cheap sources. Measure each source down to the first visit:

MetricFormula
Contact rateLeads you reached ÷ leads received
Booking rateFirst appointments booked ÷ leads received
Show rateFirst visits completed ÷ appointments booked
Cost per new patientTotal source cost ÷ first visits completed

Fill these with your own counts; we don't publish industry averages because they vary too widely to be useful. The fastest way to raise all four is to reply sooner: see how to respond to leads faster.

HIPAA and who owns the patient data

Under HIPAA, a business associate is a person or company that creates, receives, maintains or transmits protected health information on behalf of a covered entity (45 CFR 160.103 (opens in a new tab)). HHS's business associate guidance (opens in a new tab) requires a Business Associate Agreement with each one.

What that means for leads:

  • A vendor that collects, stores or routes patient-identifying inquiries on your practice's behalf (for example, hosting your intake form or handling your inquiries) may be a business associate, and needs a BAA before patient information flows. See when a vendor is a business associate.
  • A vendor collecting inquiries on its own behalf, under its own terms, controls that data until it reaches you. Read what the person agreed to and what the vendor may do with it.
  • Once an inquiry reaches your practice, protect it like any other patient information: access-controlled storage, no forwarding to personal email, and no ad pixels on the forms that collect it, in line with HHS's tracking guidance (opens in a new tab).

Data ownership follows the contract. Leads from your own site and listing are yours from the first contact. For the wider channel picture, see patient acquisition strategies.

This is general information, not legal advice. Confirm how it applies to your practice with a qualified advisor.

Frequently asked questions

What is healthcare lead generation?

Healthcare lead generation is any method of producing inquiries from people who might become patients: a call, a form, a chat or a booking request. Practices either generate leads themselves through their website, Google listing and ads, or buy them from vendors, directories and marketplaces that collect inquiries and pass them on, usually for a fee per lead or per booking.

Are bought patient leads worth it?

Sometimes, for a defined purpose such as filling a new provider's schedule quickly. Judge them on cost per new patient, not cost per lead, because shared or low-intent leads may rarely book. Check whether leads are exclusive, how consent was captured, what the refund policy is for bad leads and whether the vendor signs a BAA. Meanwhile, build demand you own.

Who owns the patient leads a lead generation company sells?

It depends on the contract, so read it. Some vendors sell the same lead to several practices or keep the right to reuse the data. Once a person becomes your patient, their records are yours to protect under HIPAA. Leads from your own website and Google listing are yours from the first contact, and no one else is paid to resell them.

How much does a healthcare lead cost?

There is no reliable public average, because prices vary by specialty, market, exclusivity and how the lead was generated. Compare options on your own numbers instead: total monthly cost divided by new patients produced. A lead that costs less but rarely books can be more expensive per patient than a higher-priced exclusive lead or a click on your own search ad.

Sources

  1. Business Associates Frequently Asked Questions (opens in a new tab) — HHS Office for Civil Rights. Accessed October 22, 2026.
  2. 45 CFR 160.103 — Definitions (business associate) (opens in a new tab) — eCFR. Accessed October 22, 2026.
  3. Introduction to the Advertising Standards (Lead Ads section) (opens in a new tab) — Meta Transparency Center. Accessed October 22, 2026.
  4. Personalized advertising (opens in a new tab) — Google Advertising Policies Help. Accessed October 22, 2026.
  5. Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates (opens in a new tab) — HHS Office for Civil Rights. Accessed October 22, 2026.
All pages

Free AI marketing audit

See how your practice shows up — free

Scores for your website, SEO, Google listing, AI visibility, social and ads, with your top five fixes. It reads public information only.