The Blog

Field notes on compliance-first growth.

Meta ads for health & wellness, privacy-compliant tracking, and what actually works in regulated categories — from the team running the accounts.

Regulated Markets · Meta Ads

Meta Keeps Restricting Health & Wellness Advertisers. Here's the Playbook We Run.

Meta's data restrictions don't pause your campaigns — they quietly remove your optimization signal. The five moves that keep restricted accounts alive.

· Jason Garrett · 8 min read

Regulated Markets · Meta Ads · AI

Meta's AI Features Are On by Default. Here's What We Actually Enable for Health & Wellness Accounts.

AI pixel enrichment activated by default in May. Our portfolio configurations by account type — and the two failure modes we design against.

· Jason Garrett · 7 min read

Resource Cluster

HIPAA-Compliant Tracking

A living guide to which marketing and analytics tools can run on a healthcare site — and how to configure the ones that can. Start with the overview, then jump to the tool you're evaluating. Not legal advice.

Start Here · Living Guide

The State of HIPAA-Compliant Marketing Tracking

Can healthcare marketers use GA4, the Meta pixel, or retargeting in 2026? A plain-English, continuously updated guide to the OCR guidance, AHA v. Becerra, state laws, FTC enforcement, and pixel litigation.

Does HIPAA Apply to My Website?

Start here

More than you think — a plain-English guide by business type.

Google Analytics (GA4)

No

Google won't sign a BAA — and IP anonymization doesn't fix it.

Meta (Facebook) Pixel

No

The single most litigated tracking tool in healthcare.

TikTok Pixel

No

No BAA, and the same client-side leak as the Meta pixel.

Hotjar & Session Recording

No

Recordings capture form entries that become PHI on health sites.

Klaviyo

No

No BAA — what that means for health email/SMS, and the alternatives.

Meta Conversions API (CAPI)

With setup

The compliant path for Meta ads — behind a PHI-scrubbing gateway.

Google Tag Manager

With setup

A delivery truck — server-side GTM is the compliant backbone.

Google Ads Conversion Tracking

With setup

Not by default — compliant via server-side, scrubbed imports.

CallRail

Yes, with BAA

On the Healthcare plan with a signed BAA — watch the integrations.

HubSpot

Yes, with BAA

On Enterprise with a BAA and sensitive-data features enabled.

Mixpanel & Amplitude

Yes, with BAA

Both offer BAAs on qualifying plans — compliance lives in the setup.

Published elsewhere

Guest articles and contributed pieces by our founder.

Ours Privacy · March 2026

Meta Platform Restrictions Explained: What Core Setup Actually Means

The full technical breakdown of Meta's three restriction tiers, how the categorization engine works, and the six-step compliance playbook. ↗

Curve · May 2026

Five Questions to Answer Before Turning On Meta's New AI Features

The decision framework for Meta's in-platform agent and AI pixel enrichment, question by question. ↗

Growth in a regulated category?

We run compliance-first paid acquisition for health & wellness, healthtech, and fintech brands.

Book a Consultation