Recipes

Solo practice

You're a solo therapist, dentist, or independent clinician. You probably didn't build your own site — a template, a web designer, or a marketing tool did. This recipe is the shortest path to knowing whether it's leaking risk, and fixing the worst of it.

The 20-minute setup

  1. Scan your site

    Run a free scan against your home page. Pay special attention to whether your booking or contact page shows up as appointment or intake_form — those are where risk concentrates.
  2. Fix the top findings

    For most small-practice sites the high-impact items are: an analytics or advertising tag firing on the booking page, a contact form that submits over HTTP or to a third party, and a privacy policy that doesn’t mention analytics or third-party sharing. Forward these to whoever maintains your site.
  3. Turn on weekly monitoring

    Verify your domain and enable weekly rescans. If your web designer adds a new tool later, you’ll get an alert instead of finding out the hard way.

If you use a third-party booking widget

Online scheduling and intake widgets are common in solo practices and are a frequent source of findings — they often load their own trackers. If yours is flagged, ask the vendor whether they sign a business associate agreement and whether tracking can be disabled on the embedded form.