Privacy First

What "HIPAA-Conscious"
Actually Means.

No PHI. No BAA. No liability.

It means I never handle your patients' PHI.

I build marketing websites — not patient portals. Instead of collecting PHI, I guide your patients to secure channels: phone calls, HIPAA-compliant emails, or your EHR's patient portal with built-in booking and contact forms. I never collect, store, or process PHI on your website — helping both of us stay isolated from unnecessary legal exposure.

✓ No BAA required✓ No PHI✓ Peace of mind
Common Attack Surfaces

Where PHI Leaks Happen

Page builders and third-party tools introduce leak points without you realizing it.

01

Designer Ignorance

Most designers don't understand HIPAA, PHI, or BAAs. They use the same security measures, page builders, and plugins for every client — regardless of compliance requirements.

02

WordPress Plugins & Databases

Popular contact forms—along with booking widgets and intrusive analytics—often store submissions in non-HIPAA-compliant databases. That is PHI you are liable for, and every plugin introduces another attack surface.

03

Analytics & Third-Party Scripts

Google Analytics collects IP addresses and visitor data. Google also will not sign a BAA for it. Tracking pixels, font libraries, and other scripts can also collect data you didn't consent to — and may not even know about.

What I Do Instead

My Approach

  • Hand-crafted static sites— no databases, no PHI storage
  • Zero contact forms— patients use secure channels
  • Privacy-first analytics— Fathom Analytics uses no cookies, collects no personal data, and never stores IP addresses.
  • Direct EHR linking— booking goes to your existing tools
  • Cloudflare hosting— secure, fast, no PHI stored

What I Don't Use

  • No page builders— Wix, Squarespace, WordPress, or others
  • No plugins— nothing that stores or transmits PHI
  • No contact forms— no PHI collection at all
  • No databases— means no PHI storage
  • No PHI handling— so you stay compliant and sleep easy

Bottom line:Your website becomes a secure digital front door — not a liability. That's HIPAA-conscious web design that actually works.

Let's Talk About Your Practice.

If you're thinking about a new site—or not sure where to start—I'd love to hear from you.

01

Reach out

Call or email. Whatever works for you.

02

Talk it through

No pressure. Just a conversation about your practice.

03

Decide

Clear next steps. No obligation.

I build websites for mental health providers nationwide—remotely. But if you're based in or near Knoxville, TN, I'm happy to meet at your office.

Frequently Asked Questions.

Everything you need to know.