Why Google Ads Treats Health Data Differently From Meta

Last updated: October 6, 2026 · By Jason Garrett, Founder, Coast Studio. Not legal advice. Full legal landscape: The State of HIPAA Tracking.

Meta polices the signal you send. Google polices what you join it to. Meta reads your pixel and Conversions API traffic, classifies your data source as health and wellness, and limits lower-funnel events in optimization. Google keeps accepting conversion counts from health advertisers and lets Smart Bidding use them. It shuts health advertisers out of every product that matches their customer data to Google accounts: enhanced conversions, Customer Match, remarketing lists, and lookalikes.

Teams that copy a Meta playbook onto Google tend to break Google’s rules in the one place Meta gave them room, which is hashed customer data.

The rules side by side

Why Google built it this way

Our read is that each company protects the asset its ad system depends on. Meta’s delivery runs on the conversion signal advertisers send back through the pixel and CAPI, so Meta has to inspect that signal and decide how much of it to use. When Meta decided health data was a liability, it built a classifier that sits on the signal.

Google’s delivery runs on intent Google already holds: the search query, the video watched, the app installed. Google has no need for your patient list to find people researching a condition, because it sees the research. What it refuses is the join between your customer records and its users.

The personalized advertising policy says as much. Predefined Google audiences stay open to sensitive categories “because the sensitive user signals are automatically excluded from them.” Google keeps the health signal on its side, runs its own filter, and keeps advertiser-supplied identity away from health context.

What this means for a health advertiser on Google

1. Import the click ID and stop there. Capture the gclid in your form or scheduling system, then upload conversions server-side with a generic conversion action, a timestamp, and a value. Leave enhanced conversions off, even when Google Ads recommends turning them on. Field-level rules: what you can send to Meta CAPI and Google offline conversions.
2. Trust Smart Bidding with counts. Bidding needs accurate conversion volume and value, and a gclid import supplies both. Our healthcare accounts optimize on exactly this setup.
3. Drop remarketing and Customer Match. Google closes both to sensitive categories, and health-behavior audiences carry state-law risk on top. Lean on search intent and Google’s in-market segments.
4. Get certified before you scale. Google’s healthcare and medicines policy requires certification, usually through LegitScript, for telehealth, online pharmacy, prescription drug, and addiction treatment advertisers.
5. Keep GA4 off health pages. Google’s Analytics help page says HIPAA-regulated entities “may only use Google Analytics on pages that are not HIPAA-covered.” More: Is Google Analytics HIPAA compliant?

Three mistakes teams make when they carry a Meta playbook to Google

• Hashed emails with consent. On Meta, consented hashed identifiers on a generic event are a defensible choice. On Google, health conversions fall outside enhanced conversions regardless of consent.
• Reading silence as approval. Meta shows its classification in Events Manager. Google usually says nothing until a policy review flags the account, so an account can run out of policy for months and then lose Customer Match, enhanced conversions, or the account itself.
• Uploading one patient list to both platforms. The FTC’s complaint against Hims & Hers alleges that 14 million email addresses went to Meta as Custom Audiences. Hims disputes the claims. Google bars the equivalent upload for health advertisers by policy.

Where the two platforms agree

Neither platform signs a BAA for advertising, and both prohibit health information in the data you send. The safe payload is identical on both: a generic event name, a timestamp, a value, and a click ID. The field-by-field version lives in our guide to Meta CAPI, Google offline conversions, and PHI.

FAQ

Can a healthcare advertiser use enhanced conversions on Google Ads? Health conversions are excluded. Google’s customer data policies bar conversions related to health or medical information, such as purchases of medical services, prescription drugs, or medical devices, from enhanced conversions measurement. Use an offline conversion import keyed on the gclid.

Can health advertisers use Customer Match? Google’s personalized advertising policy lists health as a sensitive interest category, and advertisers in sensitive categories lose access to Customer Match, your data segments, lookalike segments, and audience expansion.

Does Google restrict conversion tracking for health advertisers the way Meta does? Google publishes no equivalent of Meta’s health and wellness tiers for conversion events. Health advertisers can report conversions and bid on them. Google restricts the customer data attached to those conversions and the audiences built from it.

Will Google sign a BAA for Google Ads? Google signs BAAs for Google Cloud and Workspace, and neither agreement covers Google Ads or Google Analytics.

Is Google more lenient than Meta? Google is strict in a different place. It lets health conversions drive bidding, which Meta often limits, and it closes customer data matching and remarketing to health advertisers by policy.

Running Google and Meta for a health brand? Coast Studio builds and runs both under these rules.