A practice manager called us last spring in a tight spot. She’d decided to leave her current marketing agency after eighteen months of flat numbers, expecting the switch to take a week or two. Three months later, she was still locked out of her own Google Business Profile. The agency had set it up under an email address belonging to someone who no longer worked there. Her website sat on the agency’s server, under the agency’s account, and the developer who built it had since left to start his own firm in another state. Nobody, including the agency, seemed to know the password anymore.
That story isn’t rare, and it points to something most practices get backward when they’re vetting a new agency and evaluating healthcare marketing agency red flags.
Most healthcare organizations and practices walk into the sales process asking about price, timeline, and what kind of results they can expect. Those are reasonable questions. But they’re not the questions that predict whether you’ll be stuck, two years from now, unable to leave without starting your entire online presence from scratch. The single biggest red flag in healthcare marketing has almost nothing to do with strategy or pricing. It’s about who actually holds the keys to your digital assets and whether your marketing partner provides transparency and control, and most practices don’t find out the answer until they try to walk away.
The Ownership Question Comes First
Before anything else, ask one question and don’t move forward until you have a clear answer: who owns the accounts?
That means your Google Business Profile, your website domain and hosting, your Google Analytics data and Search Console properties, your social media pages, and any ad accounts running Google Ads or Meta campaigns with full access to the ad accounts and campaign data. A legitimate agency works inside accounts that belong to your practice as a good agency and long-term marketing partner should. They have access, sometimes administrative access, but the practice is the owner of record. If an agency insists on building these under their own organization, their own email addresses, or their own agency-level accounts “for efficiency,” that’s the moment to slow down.
The efficiency argument isn’t entirely made up. There’s real overhead in managing dozens of client logins, and some agencies genuinely believe centralizing accounts makes their internal workflow smoother. But the cost of that convenience falls entirely on you if the relationship ends. A practice that owns its assets can fire an agency on a Tuesday and have a new one working by Thursday. A practice that doesn’t can spend months in account-recovery purgatory, during which their Google Business Profile sits unmanaged, their website can’t be updated, and their ad campaigns either keep running on someone else’s dime or get shut off entirely.
The Second Red Flag: Guarantees That Sound Too Good
If an agency tells you they can guarantee a number one ranking on Google, an overnight success, or promises a specific number of new patients within a fixed window, that’s worth treating as warning signs rather than a selling point. Google’s own guidance for businesses evaluating SEO providers states plainly that no one can guarantee a top ranking, and it specifically tells businesses to be cautious of SEO providers who claim to guarantee search rankings or claim to have a special relationship with Google.
This isn’t because good agencies can’t produce results. It’s because nobody, including the people who work at Google, controls the algorithm closely enough to promise a specific outcome by a specific date. An agency that’s confident in its process will tell you what it plans to do, how it measures progress, and what kind of timeline is realistic based on your market and competition. An agency that leads with a guarantee is either targeting a keyword so obscure that ranking for it won’t bring you a single new patient, or it’s setting up an escape hatch in the contract fine print that makes the guarantee effectively unreachable.
The Third Red Flag: Reporting That Measures the Wrong Thing
Ask to see a sample report before you sign anything to avoid vague reporting. If it’s full of keyword rankings, impressions, and traffic numbers with no mention of calls, form submissions, or new patient bookings, that’s a problem, even if the numbers look impressive.
Rankings and traffic aren’t meaningless, but they’re inputs, not outcomes. Vanity metrics alone don’t measure success. A page can rank well and get plenty of visitors while converting almost none of them into actual patients, especially if the content doesn’t address what someone considering surgery actually wants to know, or if the practice’s phone number and booking process create friction once someone arrives. The agencies worth working with track the full chain using data and specific results: visibility, then traffic, then contact, then booked appointment. If a report stops at traffic, ask why, and ask what they’re doing to track what happens after someone lands on the page.
The Fourth Red Flag: Content That Could Belong to Any Practice
Pull up a few blog posts or service pages the agency has written for other clients in your specialty. If you could swap out the practice name and city and the content would read identically, that’s a sign the agency is running a templated content operation rather than one that understands orthopedics specifically.
This matters more in healthcare than in most industries, because orthopedic patients research differently than, say, someone shopping for a roofer. They’re often coming off a referral from a primary care doctor, nervous about a procedure, and checking credentials and outcomes before they commit. Generic content that talks about “comprehensive care” and “state-of-the-art facilities” without getting specific about procedures, recovery timelines, or what makes a surgeon’s approach different doesn’t do much for that patient, and gives search engines little reason to treat the page as authoritative either. Research on how orthopedic patients choose surgeons has found that a large share search online before their first visit, which means your site’s content is doing real work in that decision, not just sitting there for SEO’s sake. An agency that’s spent real time on marketing built specifically for orthopedic practices usually shows it in the specificity of their past work, not just in the pitch deck.
The Fifth Red Flag: Testimonials and Before-and-After Claims Without a Second Thought
Patient testimonials and before-and-after photos are powerful marketing tools, and they’re also one of the more heavily regulated corners of healthcare advertising. The Federal Trade Commission has been explicit that testimonials used in advertising have to reflect what a typical customer can expect, and advertisers are responsible for making sure testimonials and endorsements aren’t misleading, even when the testimonial itself reflects someone’s honest experience. A testimonial describing an unusually fast recovery, used without context, can create a deceptive impression even if the patient who said it meant every word.
If an agency hands you a stack of testimonials to post without ever asking about typical outcomes, disclosure requirements, or how the content fits within your state’s medical advertising rules, that’s a sign they’re treating your practice like any other local business rather than one operating in a regulated space. This isn’t a reason to avoid testimonials. It’s a reason to work with people who know the difference between marketing a restaurant and marketing a surgical practice.
Where We’d Push Back on the Conventional Red Flag List
Here’s the one where we’re going to argue against ourselves a little.
A lot of “how to spot a bad or wrong agency” content treats long-term contracts as inherently suspicious, the implication being that a good agency should be confident enough to work month to month. We don’t think that’s actually true, and we’d be lying if we pretended otherwise, since we use multi-month agreements ourselves.
SEO and content work take time to show up. Building out service pages, fixing technical issues, and earning the kind of citations and links that move rankings is slow by nature, often six months or more before the trend lines are obvious. An agency offering only month-to-month terms isn’t necessarily more trustworthy. Sometimes it’s a sign they’re optimizing for short-term retention rather than committing to slower work that actually moves the needle. The contract length, by itself, tells you very little.
What actually matters is what’s inside the contract. Can you take your content, your website files, and your account access with you if you leave, contract term or not? Is there a clear cancellation process, even if it requires advance notice? Are deliverables specific enough that you’d know if they stopped happening? A twelve-month agreement with full asset portability and clear deliverables is a far better deal than a month-to-month arrangement where everything lives in the agency’s accounts and the reporting is vague enough that you couldn’t prove underperformance if you tried.
What to Actually Ask During the Sales Process
Most of this comes down to a handful of direct questions, asked before you sign anything.
Ask who will own the Google Business Profile, website, and ad accounts, and get the answer in writing. Ask for a sample monthly report from an existing client, with identifying details removed, so you can see what gets measured. Ask to see content they’ve written for other orthopedic or surgical practices, and read it for whether it could apply to any practice in any city. Ask directly whether they make ranking or traffic guarantees, and if so, what happens contractually if those numbers aren’t hit. And ask what offboarding looks like if the relationship ends, specifically whether you’d retain access to everything that’s been built.
None of these questions are confrontational. A team that’s confident in how they operate will have straightforward answers to all of them, usually without much hesitation. The hesitation itself is informative and often a sign of poor communication.
If you’re in the process of evaluating agencies and want a second opinion on a contract or a sample report before you commit, the entire team at Fortress Digital has reviewed enough of these agreements, on both sides, to spot the patterns quickly.
Frequently Asked Questions About Healthcare Marketing Agency Red Flags
The Questions That Matter Once the Contract Is Signed
Hiring a marketing agency for a healthcare provider before signing is only half the job. The other half is checking these same questions periodically once the relationship is underway. Account ownership can quietly shift if a practice changes staff and nobody notices who has admin access anymore. Reporting can drift back toward vanity metrics if nobody asks for patient-level numbers consistently. None of this requires distrust of the agency you’re working with. It just means treating access with compliance and transparency, and reporting the way you’d review any other vendor relationship that touches how your practice gets new patients.
Ready to work with a reputable agency that tracks real patient growth and backs its work with transparent reporting? Fortress Digital supports healthcare practices that build strategies around documented outcomes, not marketing hype.
Contact us now for a free video SEO audit and proposal.
Written by Lisa Carter
Lisa Carter is VP at Fortress Digital, an orthopedic surgeon SEO agency, where she oversees content strategy and search visibility for orthopedic clients across the country. She works directly with surgeons to translate what’s happening in search and AI discovery into practical, day-to-day decisions about where marketing budgets and content efforts should go.