What HIPAA-aware marketing means
HIPAA-aware marketing means we design and run campaigns with an understanding of HIPAA's boundaries and coordinate closely with your legal and compliance team, without positioning ourselves as HIPAA-certified, since no such certification exists for marketing agencies. It means privacy-sensitive analytics, careful data handling and never building audience targeting from a visitor's health condition or behavior.
Why "HIPAA-aware," not "HIPAA-compliant agency"
There is no HIPAA certification for marketing agencies, and any agency claiming to be "HIPAA-certified" or to "guarantee compliance" is describing something that does not exist. HIPAA compliance is a program your organization runs, governed by your own legal and compliance function. What we can do, and do consistently, is work in a way that respects those boundaries and supports your compliance program rather than creating risk for it.
What this looks like in practice
We do not build condition-based audience targeting from site behavior. If a marketing tactic involves any form of audience targeting, we say so plainly rather than leaving it implicit. Every form on our clients' sites, and on this one, carries a clear notice not to submit patient information. We use privacy-sensitive analytics configurations, consistent with the kind of careful data handling this category requires. Across our broader analytics work, this includes managing tens of thousands of health-related data layers within HIPAA-compliant constraints for the systems and infrastructure we support.
How we coordinate with legal and compliance
We treat your legal and compliance team as a partner in the process, not an obstacle at the end of it. That means flagging anything in a campaign that touches compliance-sensitive territory before it goes live, not after, and building review into the process rather than around it.
What we do not do
We do not promise outcomes. We describe what was achieved for a named client, attributed to that client, and we do not imply a guarantee for your organization. We do not provide legal advice. If a question requires a legal answer, we say so and point you to your own counsel or compliance officer.
Common questions
Is mhp.si Health HIPAA-certified?
No such certification exists for marketing agencies. We describe our approach as HIPAA-aware: informed by HIPAA's boundaries and coordinated with your compliance team, not certified by any HIPAA authority.
Can you build marketing that targets people based on a health condition?
No. We do not build condition-based audience targeting from site behavior, and we will tell you plainly if any proposed tactic involves audience targeting of any kind.
What happens if patient information is submitted through one of your forms?
Every form carries a notice asking that patient information not be included. If it is submitted anyway, we treat it carefully and can delete it on request.
Does this mean you provide legal guidance on our compliance program?
No. mhp.si Health does not provide legal advice. We coordinate with your legal and compliance team, but decisions about your compliance program belong to your own counsel.