Your website is leaking patient data. Probably right now.
Most healthcare sites quietly send visitor behavior to Google, Meta, and TikTok — a HIPAA exposure that has cost practices millions. Ponzu is the analytics platform built to be HIPAA- and healthcare-safe: all the numbers you need, none of the leak.
Instant. No signup. We read one page and show you exactly what's on it.
Plans from $75/mo — founder pricing for the first 50 practices →
"We didn't start with a product. We started with our own practice — and found our website quietly sending patients' visits to Google, Meta, and a session recorder. We tore all of it out, rebuilt our measurement the private way, and only then offered it to anyone else."
You're almost certainly exposed — and it isn't cheap.
The trackers come pre-installed by website builders and marketing agencies, tuned for ad performance, not HIPAA. Nearly every practice has them. The liability, and the bill, land on you.
Small practice? You're not too small — penalties apply to a solo clinic exactly as to a hospital, and anyone can file the complaint that starts it.
Don't guess — scan your site now →Two ways to measure a healthcare website.
- Data leaves for Google, Meta, TikTok
- No BAA — an impermissible disclosure
- Cookies and stored IP addresses
- Session recordings of what patients type
- Your patients become ad-targeting data
- Consent banners, and liability anyway
- Data stays on infrastructure you control
- Covered by a BAA
- Cookieless, no stored IPs
- No session recording, ever
- Nothing sent to any ad platform
- Clean numbers, no banner theater
Keep your marketing. Lose the liability.
The most common worry: won't pulling the trackers blind my advertising? No. You lose the exposure, not the insight.
You keep the numbers you use
Visitors, traffic sources, which campaigns bring patients, which pages convert — all still there, on a dashboard only you can see.
Your ads keep working
Running Google or Meta ads? We measure them on your side, so your campaigns keep performing — without a pixel reporting your patients back to the ad platform.
Only the leak stops
The single thing that changes: your patients' behavior stops flowing to companies that never signed a BAA.
Everything you measure today — kept private.
Traffic, sources, top pages, campaign performance — on a dashboard only you can see. We deploy and run the whole thing; you never touch a terminal.
- Cookieless by design — no fingerprinting, no stored IPs, no banner.
- Built for clinical sites — query strings stripped, sensitive paths coarsened.
- Deployed & managed for you — BAA-covered infrastructure, hardened and backed up.
- Yours to keep — export any time; retention on your terms.
Compliance is the new competitive edge.
The practices that get this right don't just avoid fines — they earn something competitors can't fake. Patients are choosing who to trust with the most sensitive thing they have. Being the practice that doesn't track them, doesn't sell them, and can prove it is a story the clinic down the street can't tell.
We take one practice per market — so the edge stays yours. In your city, that seat is still open.
The first 50 practices lock $75/month for life — it never goes up, no matter how much Ponzu grows.
3-month minimum if you install it yourself · 12-month if we handle integration and setup.
Request an invitation
Ponzu is invitation-only, and we take a limited number of practices per market — so your city and state tell us whether yours is still open.
Not sure yet?
Scan your current site and see exactly what it's exposing. Free, instant, no signup.
Run the free scan →