Dental website vendors sell packages built around things that photograph well in a demo: a video header, a smiling stock family, a rotating carousel of services, a blog nobody reads. Meanwhile the actual job of the site is narrow. A prospective patient found you through a search or a referral, has a question or a problem, is probably on a phone, and will decide within about thirty seconds whether to call, book, or go back to the results page.
This post is the short list: what the site must do, what it must not do, and what you can skip without consequence. It also covers two areas where practices create real liability without realizing it: web accessibility and patient forms.
Accessibility and privacy law are genuinely complicated and change. What follows is educational. Confirm your specific obligations with a healthcare attorney and, for accessibility, a qualified professional who can test your actual site.
Key takeaways
- Speed on a mobile connection is the highest-leverage technical thing on a dental website. Most of the slowness comes from oversized images, video headers, chat widgets, and stacked tracking scripts.
- The phone number must be tappable and visible without scrolling on every page. Most dental patients still call.
- Online scheduling raises booking rates only if it shows real, accurate availability. A form that says "we will call you back" is a contact form, not scheduling, and should be labeled honestly.
- Web accessibility: the DOJ issued a rule in 2024 setting WCAG 2.1 Level AA as the technical standard for state and local government entities under ADA Title II. Private dental practices are Title III public accommodations, for which DOJ has not adopted a specific web regulation, but private lawsuits and demand letters against healthcare websites are common. WCAG 2.1 AA is the practical benchmark either way.
- Any form that collects health information, and any page where a patient discusses symptoms, needs to be treated as protected health information. That means encryption, a business associate agreement with the vendor, and careful handling of third-party tracking pixels.
- HHS OCR has issued guidance on online tracking technologies and PHI, and its legal status has been contested in court. Treat analytics and advertising pixels on patient-facing pages as a compliance question, not a marketing detail, and get current counsel.
Speed: the part that actually costs you patients
Google measures page experience with three field metrics, collectively the Core Web Vitals: Largest Contentful Paint (how long until the main content appears), Interaction to Next Paint (how quickly the page responds when tapped), and Cumulative Layout Shift (how much the page jumps around while loading). Commonly cited "good" thresholds are 2.5 seconds or less for LCP, 200 milliseconds or less for INP, and 0.1 or less for CLS, measured at the 75th percentile of real visits.
Whether these directly affect ranking is debated. What is not debated is that a slow site on a cellular connection loses visitors. A patient in pain does not wait eight seconds.
What actually makes dental sites slow
| Cause | Fix |
|---|---|
| Huge uncompressed images (a 4 MB hero photo is common) | Compress and resize; serve modern formats; size images to the space they occupy |
| Autoplay video header | Remove it. It is the single heaviest element on most dental sites and it converts nothing |
| Image carousel or slider on the homepage | Remove it. Visitors rarely see past the first slide, and sliders cause layout shift |
| Chat widget loading on every page | Load it only after a delay or on user interaction, or drop it |
| Five tracking scripts (analytics, two ad platforms, a call tracker, a heatmap tool) | Audit them; remove any you have not looked at in six months. Each one has a privacy implication too |
| A page builder loading a dozen unused stylesheets and fonts | Limit custom fonts to one or two weights; ask the vendor to trim |
| Cheap shared hosting with slow server response | Upgrade hosting or move to a vendor with a content delivery network |
| Ads and embeds without reserved space | Reserve dimensions so content does not jump (this is your CLS score) |
Test it yourself, on a phone. Use Google's PageSpeed Insights on your homepage and one service page, and look at the mobile tab, not desktop. Then do the real test: turn off wifi, open your site on your phone, and time how long until you can tap the phone number. If it is more than three seconds, you have a problem worth money.
Mobile: assume most visitors are on a phone
For local healthcare searches, mobile is the majority of traffic for most practices. Check your own analytics, but design for the phone either way.
Mobile essentials
- Phone number is a tappable link (tel: link) and is visible in the header on every page without scrolling
- Tap targets are large enough that an adult thumb does not miss them
- Body text is readable without zooming (roughly 16 pixels or larger)
- No horizontal scrolling at phone width
- Forms use appropriate input types so the phone shows a number pad for phone fields and an email keyboard for email fields
- The address links to a map app in one tap
- Hours are text on the page, not baked into an image
- No pop-up that covers the screen on arrival and is hard to dismiss
- The booking button is reachable without scrolling through three sections of marketing copy
Calls to action: pick two and repeat them
The most common dental homepage mistake is offering eight equally weighted options: call, book, email, chat, request a callback, download a coupon, read the blog. That is not a menu, it is noise.
Choose two primary actions, usually Call and Book Online, make them visually dominant, and repeat them at the top of the page, after the first content block, and in a persistent footer bar on mobile.
Specific things that work
- Answer the insurance question on the homepage. "We are in network with [list]" and "we file with all PPO plans" are among the highest-value sentences on a dental website, because it is the first question most shoppers have. Keep the list current.
- Put the emergency path in the header. "Dental emergency? Call [number]" handles your highest-intent visitor immediately.
Do not hide the phone number. Some vendors bury the phone number to push visitors into a lead form they can count and bill you for. This measures well in their dashboard and loses you patients who wanted to call. Fix it. If you use call tracking numbers, make sure they are implemented in a way that does not break your Google Business Profile consistency, and confirm the call tracking vendor's recording and privacy practices, since call recordings of patients discussing symptoms are PHI.
Online scheduling: worth it, with conditions
Real online scheduling, meaning the patient sees actual open slots and books one that lands in your schedule, raises booking rates and captures after-hours demand. That is when a large share of people are actually looking.
The conditions that determine whether it works:
| Requirement | Why |
|---|---|
| It writes into your practice management software | A separate calendar you have to transcribe becomes a source of double bookings and gets abandoned |
| Availability shown is real and current | A patient who books a slot and then gets a call saying it is unavailable is worse off than if you had no booking at all |
| Appointment types are limited and defined | Let patients book new patient exams, hygiene, and emergency consults. Do not let them book a three-unit bridge seat |
| Rules control what can be booked when | Block same-day new patient slots if you cannot staff them; protect your production columns |
| Confirmation is immediate and automatic | Plus a reminder sequence. See reducing no-shows |
| Someone owns it daily | Online bookings need review, insurance verification, and sometimes a call. Assign it |
| The vendor signs a business associate agreement | Booking data plus reason for visit is PHI |
If you cannot meet those conditions, a clearly labeled "Request an appointment" form is honest and fine. Just do not call it online scheduling. And answer it fast: response time is the whole game on request forms.
Open Dental users should look at the web scheduling and eServices features in their version and confirm current capabilities against the manual; functionality varies by version. See administration and eServices and scheduling and recall. ChairsideSource is independent and not affiliated with Open Dental Software, Inc.
Accessibility: what the obligation actually is
This is the area where dental practices most often get an unpleasant letter.
The legal landscape, simply
- ADA Title II covers state and local government entities. In 2024 the Department of Justice issued a final rule adopting WCAG 2.1 Level AA as the technical standard for their web content and mobile apps, with compliance deadlines phased by entity size. This directly binds public entities, including some public health clinics and dental school clinics.
- ADA Title III covers private businesses that are places of public accommodation, which includes a private dental office. DOJ has not issued an equivalent technical regulation for Title III web content. That does not mean there is no exposure: courts have found websites of public accommodations subject to the ADA, and a substantial volume of demand letters and lawsuits targets healthcare provider websites. Circuits differ on the analysis, which is exactly why practices get letters rather than clear rules.
- Section 504 and Section 1557 can apply if your practice receives federal financial assistance, which includes some practices participating in certain federal programs. Section 1557 rules for covered entities have addressed accessibility of health programs delivered through websites and patient portals. Whether you are covered is a legal question specific to your practice.
- State laws add their own requirements in some states.
The practical conclusion for a private practice: WCAG 2.1 Level AA is the benchmark to build to, regardless of which statute technically applies. It is also just good design.
Overlay widgets are not a fix. The accessibility "overlay" or "accessibility widget" that a vendor installs with one line of JavaScript, promising instant compliance, is widely criticized by accessibility professionals and by users of assistive technology, and their presence has not prevented lawsuits. Some of the most-sued websites have overlays installed. Spend the money on fixing the underlying site instead.
The accessibility items that cover most of the risk
Practical accessibility checklist
- Every meaningful image has descriptive alt text; decorative images have empty alt attributes
- Text has sufficient contrast against its background (WCAG 2.1 AA asks for 4.5:1 for normal text)
- The entire site can be operated with a keyboard alone, with a visible focus indicator
- Form fields have real labels, not just placeholder text, and errors are described in text
- Headings are used in order and describe structure, not just to make text big
- Links say where they go ("New patient forms") rather than "click here"
- Any video has captions; any audio has a transcript
- Color is never the only way information is conveyed
- The page works when text is enlarged to 200%
- No content flashes rapidly
- PDFs of patient forms are accessible, or an accessible alternative is offered (this is the most commonly missed item in dentistry, because form PDFs are usually scanned images)
Ask your web vendor in writing which WCAG level they build to, whether they have tested with a screen reader, and what they will fix if you receive a complaint. Get the answer before you sign. For anything beyond this list, hire an accessibility specialist to audit the site; automated scanners catch perhaps a third of real issues.
Forms and HIPAA
The moment a patient types symptoms, medical history, insurance identifiers, or even "I need an appointment for a toothache" with their name attached, you are handling protected health information. The website vendor and the form vendor become business associates.
The requirements, plainly
- Encryption in transit. The whole site should be served over HTTPS, not just the form page.
- A business associate agreement with the website host, the form provider, the online scheduling vendor, the chat provider, and anyone else who can touch the data. Get them signed and filed.
- Know where the data goes. A contact form that emails submissions to a Gmail address, unencrypted, is a common and avoidable problem. Form submissions should land in a secure system, ideally integrated with your practice management software.
- Retention. Do not leave years of form submissions sitting in a website database. Define how long they stay and who deletes them. See records retention.
- Access control. Individual logins for anyone who reads submissions, with multifactor authentication.
- Include the website in your HIPAA risk analysis. It is part of your environment. Use the HIPAA security checklist as a starting point and see cybersecurity for dental practices.
Tracking pixels: the part practices miss
HHS OCR issued guidance addressing the use of online tracking technologies (analytics and advertising pixels) by HIPAA-covered entities, taking the position that information collected on certain webpages can constitute PHI when combined with identifiers such as an IP address. That guidance was challenged in litigation and a federal court vacated part of it, so the precise legal boundary is genuinely unsettled as of this writing.
Unsettled does not mean ignore. The conservative posture: standard analytics on general marketing pages is lower risk; be cautious with advertising pixels on condition and treatment pages; run no advertising pixels on appointment request, patient form, portal login, or bill pay pages; and run no third-party tracking at all inside an authenticated portal.
Audit what is actually installed on your site. Many practices have pixels added years ago by a former marketing vendor that nobody knows about. Ask your web vendor for a list of every third-party script on the site, and remove what you are not using. Then have a healthcare attorney review the remainder, because this is a moving target.
Also audit your chat widget. A visitor typing "I have swelling on the left side" is handing you PHI, often into a third-party system with an AI vendor behind it. Confirm the business associate agreement, confirm where transcripts are stored, and train whoever answers it not to discuss clinical specifics there.
Content: what to actually put on the site
The pages that earn their place:
| Page | Why it matters |
|---|---|
| Homepage | Location, hours, phone, booking, insurance, one clear statement of who you are and what you do |
| New patient page | What the first visit includes, what to bring, what it costs, how long it takes, forms |
| Insurance and payment | Plans accepted, financing options, membership plan if you have one. See membership plans and patient financing |
| Contact and location | Map, parking instructions, building entrance details, accessibility of the office itself, hours |
| Meet the doctor | A real photo and a genuinely human bio. This page is read far more than vendors expect |
| A handful of service pages | The procedures you actually want more of, written in plain language, each with a booking call to action |
| Emergency page | What to do, what to call, what you can see same-day |
What to skip
- Forty thin service pages generated by the vendor for every procedure code. They are usually near-duplicate boilerplate shared across hundreds of dental sites, they do not rank, and they dilute the site.
- A blog you will not maintain. Three stale posts from 2019 signal neglect. Either commit to it or remove it.
- Stock photos of models. Real photos of your actual office and team outperform them, and patients can tell.
- Testimonials you solicited or edited without disclosure. See getting and handling online reviews, because the FTC rules on testimonials apply to your own website too.
Hypothetical example of where the money is. Illustrative only.
Suppose a practice gets 1,200 website visits a month and converts 3% of them into a call or booking, meaning 36 contacts. Suppose 60% of those become appointments, so about 22 new patients a month.
Now suppose fixing mobile speed, putting a tappable phone number in the header, and adding the insurance list to the homepage lifts conversion from 3% to 4.5%. That is 54 contacts and roughly 32 new patients a month, an increase of about 10 without spending another dollar on advertising.
If the practice's average first-year value of a new patient is, say, $700, that is roughly $7,000 a month of additional production from a project that might cost a few thousand dollars once. Compare that with the cost of buying 10 additional new patients through paid search at typical dental acquisition costs and the priority ordering becomes obvious: fix conversion before you increase spend. See how much to spend on marketing.
A short project plan
If you are going to work on your website this quarter, do it in this order, because the order reflects the return.
- Audit ownership and access: the domain registrar login, administrative access to the site platform, and primary ownership of your Google Business Profile, Analytics, and Ads accounts should all be in the practice's hands, not a vendor's
- Fix mobile speed and the phone number (highest conversion return per dollar)
- Fix the form and tracking compliance (removes the largest quiet liability)
- Add or fix the insurance, new patient, and emergency information (answers the questions people actually have)
- Address accessibility to WCAG 2.1 AA, starting with alt text, contrast, keyboard navigation, and form labels
- Implement or improve online scheduling, but only if it will write into your software and someone will own it
- Then, and only then, consider a redesign
Most practices do this list backwards, starting with a redesign, and end up with a beautiful site that is still slow, still inaccessible, and still leaking PHI into an ad platform.
Confirm accessibility obligations and any tracking or forms question with a healthcare attorney familiar with your state. The technical items above are within reach of any competent web developer; the legal ones are not a do-it-yourself project.
Related reading on ChairsideSource: Google Business Profile for dentists, getting and handling online reviews, how much to spend on marketing, and cybersecurity for dental practices.
Educational content only. It is not legal, financial, tax, or clinical advice. Prices and ranges are approximate and vary by region, condition, and year. Verify current rules with your state dental board and qualified professionals. ChairsideSource is not affiliated with any manufacturer, the ADA, or the DAT.