HIPAA-safe website analytics

Your website is leaking patient data. Probably right now.

Most healthcare sites quietly send visitor behavior to Google, Meta, and TikTok — a HIPAA exposure that has cost practices millions. Ponzu is the analytics platform built to be HIPAA- and healthcare-safe: all the numbers you need, none of the leak.

Instant. No signup. We read one page and show you exactly what's on it.

Plans from $75/mo — founder pricing for the first 50 practices →

Why we built this
"We didn't start with a product. We started with our own practice — and found our website quietly sending patients' visits to Google, Meta, and a session recorder. We tore all of it out, rebuilt our measurement the private way, and only then offered it to anyone else."

You're almost certainly exposed — and it isn't cheap.

The trackers come pre-installed by website builders and marketing agencies, tuned for ad performance, not HIPAA. Nearly every practice has them. The liability, and the bill, land on you.

$18.4M one health system's settlement over web-tracking pixels (Mass General Brigham)
98.6% of U.S. hospital websites studied sent visitor data to a third party like Google or Meta (peer-reviewed, 2023)
33 / 100 top U.S. hospitals caught sending visitor data to Meta's pixel (The Markup)

Small practice? You're not too small — penalties apply to a solo clinic exactly as to a hospital, and anyone can file the complaint that starts it.

Don't guess — scan your site now →

Two ways to measure a healthcare website.

Everyone else
  • Data leaves for Google, Meta, TikTok
  • No BAA — an impermissible disclosure
  • Cookies and stored IP addresses
  • Session recordings of what patients type
  • Your patients become ad-targeting data
  • Consent banners, and liability anyway
Ponzu
  • Data stays on infrastructure you control
  • Covered by a BAA
  • Cookieless, no stored IPs
  • No session recording, ever
  • Nothing sent to any ad platform
  • Clean numbers, no banner theater

Keep your marketing. Lose the liability.

The most common worry: won't pulling the trackers blind my advertising? No. You lose the exposure, not the insight.

You keep the numbers you use

Visitors, traffic sources, which campaigns bring patients, which pages convert — all still there, on a dashboard only you can see.

Your ads keep working

Running Google or Meta ads? We measure them on your side, so your campaigns keep performing — without a pixel reporting your patients back to the ad platform.

Only the leak stops

The single thing that changes: your patients' behavior stops flowing to companies that never signed a BAA.

Everything you measure today — kept private.

Traffic, sources, top pages, campaign performance — on a dashboard only you can see. We deploy and run the whole thing; you never touch a terminal.

  • Cookieless by design — no fingerprinting, no stored IPs, no banner.
  • Built for clinical sites — query strings stripped, sensitive paths coarsened.
  • Deployed & managed for you — BAA-covered infrastructure, hardened and backed up.
  • Yours to keep — export any time; retention on your terms.
The opportunity

Compliance is the new competitive edge.

The practices that get this right don't just avoid fines — they earn something competitors can't fake. Patients are choosing who to trust with the most sensitive thing they have. Being the practice that doesn't track them, doesn't sell them, and can prove it is a story the clinic down the street can't tell.

We take one practice per market — so the edge stays yours. In your city, that seat is still open.

Ponzu — your practice's own analytics: deployed, operated, and kept private for you. © 2026 Ponzu.