Rehab and addiction-treatment PPC sits at the intersection of three of the highest-stakes constraints in digital advertising: LegitScript certification, HIPAA-grade PHI handling, and the ethical-marketing standards that the industry rebuilt after the 2017-2018 patient-brokering scandals. Get any of the three wrong and the account is suspended, the facility is fined, or worst case the operator is investigated. Get all three right and the channel produces sustainable admissions at $1,400-$11,000 cost-per-admission with payback periods of 30-90 days.
- LegitScript certification is the gating requirement and takes 8-14 weeks.
- Server-side GTM with PHI redaction before any data reaches Google Ads.
- Optimize Smart Bidding toward admitted, never form-fills.
- Verification of benefits (VOB) is the right primary conversion stage.
- Cash-pay and insurance-pay economics differ enough to warrant separate campaigns.
This guide is for addiction-treatment facilities running Google Ads in the USA, Canada, UK, and select GCC markets. To benchmark your account against admission economics, payback periods, and compliance gaps, run our free 5-axis Google Ads audit.
Updated 2026-05-09 with current LegitScript requirements, post-Consent-Mode-v2 tracking architecture, and 2026 admission-cost benchmarks.
Why rehab and addiction PPC requires its own playbook
Three structural differences from general healthcare PPC:
1. LegitScript gating. No other healthcare vertical has a paid third-party certification requirement before Google will accept ads. Initial certification takes 8-14 weeks and gates campaign launch absolutely. Treat it as the first critical-path item, not a parallel concern.
2. Restricted-category review. Google's restricted addiction-services category triggers extra ad copy and landing page review beyond standard healthcare. Specific words ('detox', 'rehab', 'recovery'), claims about success rates, and references to specific substances all flag review. Each ad pre-disapproval can take 2-5 days.
3. PHI handling carries criminal exposure. Sending substance-use information or diagnosis data to Google constitutes HIPAA Special Category PHI exposure. Penalties scale into criminal liability for the facility's privacy officer, not just civil fines. PHI redaction is non-optional.
The combined effect: rehab PPC operates under more constraints than any other consumer healthcare vertical, and the operators that ignore them get suspended within 30 days.
LegitScript certification: the gating requirement
LegitScript reviews five domains:
Cost. $2,995 application fee plus $1,995 annual renewal per facility location. Multi-facility networks pay per location.
Timeline. 8-14 weeks initial review when application is complete. Incomplete applications routinely take 6+ months.
Renewal. Annual attestation plus periodic re-audit. Material changes (ownership, licensing, location additions) must be reported within 30 days.
Failure recovery. Failed applications can be appealed; appeal success rate around 35%. Most failures are remediable within 30-60 days if marketing practices are the issue. Ownership-transparency failures are harder to fix.
Google detects LegitScript status against your Google Ads account. Running addiction-treatment ads without certification triggers ad disapproval within 24-72 hours and risks full account suspension. Account suspensions in the rehab vertical are difficult to appeal and can permanently block the operator from Google's ad ecosystem.
HIPAA-grade server-side PHI redaction
The 2026 rehab tracking architecture has four layers:
Layer 1 — Server-side GTM (sGTM) as the only path data takes from your website to Google Ads. The container redacts every URL parameter against a PHI dictionary (substance names, diagnosis codes, treatment program names, insurance policy numbers, member IDs). Field-level redaction logs every redaction for compliance audit.
Layer 2 — Enhanced Conversions for Leads with SHA-256 hashed email and phone only. Never pass name + diagnosis, name + substance, or any combination that constitutes PHI even when individual fields look innocuous.
Layer 3 — Offline conversion uploads via gclid for VOB-completed, screened, scheduled, and admitted stages. CRM (Kipu, Sunwave, BestNotes) integrates via API; weekly upload cadence acceptable, daily preferred. Conversion value reflects expected contract value tier (cash-pay vs PPO vs HMO vs Medicaid).
Layer 4 — HIPAA-compliant call tracking under BAA with CallRail HIPAA, Invoca HIPAA, or DialogTech HIPAA. Call recordings stored within HIPAA-compliant retention. Default Google call extension recording is not BAA-covered and must be disabled.
For tracking foundation work, see our server-side tracking guide.
Insurance verification (VOB) as the conversion event
Verification of benefits is the right primary conversion stage in rehab PPC, and most facilities under-track it. The reasoning:
Form-fills are too noisy. A $35-$120 CPC click producing a generic 'tell me more' lead has 5-12% admission rate. Optimizing toward form-fills produces lead-aggregator-grade results.
VOB-completed is the right qualification gate. When a prospect provides insurance details and the facility verifies coverage, the lead transitions from curious to qualified. VOB-to-admission conversion runs 18-35% — far better signal for Smart Bidding.
Admitted is the right outcome metric but the 14-45 day delay between VOB and admission is too long for Smart Bidding's primary signal. Use admitted as a secondary conversion with high value, VOB as the primary.
VOB-completed conversions are uploaded with conversion values tiered by likely contract value:
Model your CAC and payback economics with our CAC calculator and our payback period calculator.
Cost per admission and payback period economics
Healthy LTV:CAC ratios for rehab: 3-6x for residential, 2.5-4x for outpatient, 4-8x for luxury cash-pay. Below 2.5x the channel does not return capital fast enough to fund growth. Use our CAC calculator to model fully-loaded cost per admission including intake-team labor.
Account structure: detox, residential, IOP, PHP, sober living
Single-facility regional center. One MCC, one account, one campaign per program type (detox, residential, IOP, PHP). 4-7 campaigns total. Negative-keyword sharing at MCC level.
Multi-facility regional network. One account per facility (separate licensing, separate intake teams, separate LegitScript certification), shared negatives at MCC. Cross-facility brand campaign optional.
National network (Acadia, AAC-style). Account per region cluster, dedicated cash-pay luxury account separate from insurance accounts, mass-tort-style intake-center accounts for high-volume entry-funnel acquisition. Centralized CRM and reporting.
Critical separation: cash-pay versus insurance. These segments have different CPC tolerance, different ad copy, different landing pages, different intake scripts. Bundling them in one campaign starves Smart Bidding of clean signal and results in either cash-pay underspending or insurance overspending.
For multi-account architecture, see our multi-location guide.
Keyword and ad copy patterns under restricted-categories
Keyword patterns that work (compliant and converting):
- "[program type] near me" — primary intent driver
- "[program type] [city]" — geographic intent
- "[insurance carrier] rehab coverage" — high-intent qualifying
- "alcohol treatment center [region]" — adult-pathway terms
- "private rehab" / "luxury rehab [region]" — cash-pay segment
Keyword patterns that flag policy review or hurt quality:
- Specific substance + 'how to' (informational, often unqualified)
- "Free rehab" / "cheap rehab" (poor lead quality, lead-aggregator overlap)
- Adolescent-specific terms (additional restricted-category review)
- Court-mandated keywords (reasonable signal but compliance-flag heavy)
Ad copy patterns that convert:
- License and accreditation visible (Joint Commission, CARF)
- "Most insurance accepted" or "Verify your benefits" call-to-action
- 24/7 admissions phone number prominent
- No claims of guaranteed sobriety or specific success rates
- No celebrity testimonials or unverified outcome stories
For RSA writing methodology, see our landing pages guide.
Call tracking, intake centers, and ethical lead handling
Phone calls drive 60-80% of rehab admissions. Architecture priorities:
Intake center staffing. 24/7 coverage minimum for inpatient/residential programs; missed-call rate above 5% destroys admission economics. Intake staff are clinical or clinical-supervised, not pure sales.
Dynamic number insertion (DNI). Per-keyword tracked numbers via CallRail HIPAA, Invoca HIPAA, or DialogTech HIPAA. Each call ties back to gclid for offline conversion attribution.
HIPAA-compliant recording. All call recordings under BAA with provider, retained per HIPAA timeline, audit trail for any access. Default Google call recording is not BAA-covered.
Ethical-marketing controls. No quota-based intake compensation that incentivizes inappropriate admissions. No patient-brokering relationships with referral sources that LegitScript would flag.
Multilingual readiness. Spanish-speaking intake during 12-hour coverage in Spanish-dominant US metros doubles Spanish-campaign conversion rate.
Common compliance failures that trigger suspensions
Failure 1 — Running ads before LegitScript approval. Triggers ad disapprovals within 24-72 hours; risks full account suspension. Wait for certification.
Failure 2 — PHI in URL parameters or event payloads. Substance names, diagnosis codes, member IDs, treatment program identifiers in tracking flags. HIPAA violation plus Google policy violation.
Failure 3 — Specific success-rate claims. "85% recovery rate" claims trigger restricted-category review and can land the facility in regulatory trouble. Use general language about evidence-based treatment.
Failure 4 — Default Google call recording without BAA. Recordings of intake calls containing PHI without BAA coverage is a HIPAA breach.
Failure 5 — Ad copy referencing illegal substance acquisition. Even framed as 'help getting off X' some phrasings trigger restricted-category disapproval.
Failure 6 — Performance Max for rehab. Placement opacity breaks compliance review, damages brand, and inflates cost per admission.
Failure 7 — Sharing patient data with referral partners or aggregators. Patient-brokering practices fail LegitScript and can trigger criminal investigation under federal anti-kickback statutes (Eliminating Kickbacks in Recovery Act, 2018).
Sending PHI to Google through tracking pixels or event payloads. The combination of HIPAA criminal liability, Google policy violation, and LegitScript review failure can permanently end an operator's ability to run online advertising. Server-side GTM with field-level PHI redaction is non-optional.
This rehab and addiction-treatment PPC playbook is updated quarterly by SteerAds. Last update: 2026-05-09. Cost-per-admission benchmarks, payback periods, and CPC ranges are 2025-2026 panel medians from US, UK, and AUS rehab accounts spending $10k-$1M/month. Compliance guidance is informational; consult facility regulatory counsel for state and HIPAA specifics.
For supporting reading, see our healthcare PPC playbook, our server-side tracking guide, and our multi-region privacy guide. To audit your rehab account against admission benchmarks and compliance gaps, run our free 5-axis Google Ads audit, model payback with our payback period calculator, or talk to our enterprise team via contact.
Sources
Official sources consulted for this guide:
FAQ
Do I need LegitScript certification to run Google Ads for rehab?
Yes. Since 2018, Google requires LegitScript certification for any advertiser promoting addiction treatment services in the US. Certification covers business legitimacy, licensing, staff credentialing, marketing practices, and operational standards. Initial certification takes 8-14 weeks and costs $2,995 application fee plus $1,995 annual renewal per facility. Without active LegitScript certification listed against your Google Ads account, ads for addiction treatment will be disapproved and the account risks suspension. The same requirement applies to Microsoft Ads, Bing, and most major demand-side platforms.
What's the typical cost per admission for a rehab facility in 2026?
Cost per admission benchmarks 2026: $2,800-$6,500 USA inpatient/residential ($25k-$60k contract value); $1,400-$3,800 IOP/outpatient ($8k-$25k contract value); $4,500-$11,000 dual-diagnosis or luxury residential ($60k-$200k contract value). Detox-only admissions $1,800-$4,500. Insurance-payor-mix dramatically affects unit economics: cash-pay or PPO admissions justify 2-3x the bid ceiling of HMO/Medicaid admissions. UK, AUS, and Canada run roughly 30-55% of US benchmarks; GCC luxury residential runs 80-130% of US.
How do I track rehab conversions without leaking PHI to Google?
Use server-side GTM (sGTM) with field-level PHI redaction before any data forwards to Google Ads. Track these stages with PHI-stripped payloads: (1) form submission or call (lead), (2) verification of benefits completed (VOB), (3) clinical screening passed, (4) admission scheduled, (5) admitted. Hash email and phone with SHA-256 lowercase trimmed for Enhanced Conversions for Leads. Never pass diagnosis, substance, insurance ID, or treatment data in URL parameters or event payloads. Google does not sign BAAs, so all PHI redaction obligation is yours.
Can rehab facilities use Performance Max?
No. Performance Max is unsuitable for rehab for three reasons: (1) opaque placements create both compliance risk (ads on inappropriate pages) and brand risk, (2) LegitScript and Google's restricted-categories review require placement transparency, (3) volume-driven optimization conflicts with the quality-driven economics of admissions. Stick to Standard Search with manual placement controls. Local Services Ads are not available for addiction treatment in most US markets.
What CPC should I expect for rehab keywords?
Rehab keyword CPCs 2026: $35-$120 for general 'drug rehab near me' or 'alcohol treatment center' terms in tier-1 US markets; $80-$280 for 'luxury rehab' or 'executive treatment program' terms; $25-$75 for IOP and outpatient terms; $45-$140 for dual-diagnosis and trauma-informed terms. Insurance-keyword combinations (e.g. 'rehab Aetna covered') often run 30-60% lower CPC and convert better. UK and AUS rehab CPCs run 40-60% of US; cash-pay GCC residential keywords match or exceed US tier-1 CPCs.
How long does LegitScript certification take and what does it review?
Initial certification typically takes 8-14 weeks once application is complete. Review covers: business legitimacy and ownership transparency, state licensing for each facility, staff credentialing (medical director, clinical director, counselors), marketing practices (no deceptive lead-aggregator behavior, no patient-brokering), operational standards, complaint history, and patient safety policies. Each facility location requires separate certification. Renewal annually with attestation plus periodic re-audit. Failed applications usually fail on marketing practices or unclear corporate ownership; appeal rates are around 35%.
Can I use insurance carrier names in rehab ad copy?
Yes, with careful framing. Bidding on insurance-related keywords ('rehab covered by Blue Cross', 'Aetna addiction treatment') is allowed and typically produces 25-50% lower CPC than generic rehab terms. Ad copy referencing 'most insurance accepted' or 'verify your benefits' is allowed; specific carrier names in copy require accuracy (you must actually accept that carrier). Avoid claims about coverage levels you cannot guarantee — those vary per plan and require VOB. Compliance review by your facility's regulatory team before launch is mandatory.
What's the minimum monthly budget for a rehab facility on Google Ads?
Practical minimum: $8,000-$20,000/month for a single-facility regional center with 30-100 beds. Below this, $80+ CPC keywords starve Smart Bidding learning. Mid-size facilities (multi-location, 100-300 beds) typically run $30,000-$120,000/month. Large national networks (Acadia, AAC-style) often run $400,000+/month per region. Cash-pay luxury facilities frequently run higher CPM equivalents because per-admission contract values support $200+ CPC bids.