Can a medical practice run remarketing or Customer Match ads?

I am a marketer, not a lawyer, and nothing here is legal advice. Everything below describes published platform policy, which is a contract question rather than a legal one, and I have linked the policy text so you can read it yourself.

The two platforms get to the same place by different routes

People describe this as “health is a sensitive category” and leave it there. The two platforms don’t actually work the same way, and the difference changes what you can do.

Google. The personalized advertising policy says advertisers promoting products and services in sensitive interest categories “are unable to use advertiser-curated audiences,” and names Customer Match, your own data segments, audience expansion, and lookalike segments. The block is on the audience tools, applied to advertisers in the restricted categories.

Meta. There’s no equivalent sensitive-category targeting policy. What exists is the Custom Audiences Terms, which require that audience criteria not include “health information, financial information, consumer report information, or other categories of sensitive information.” That’s a data rule about what you upload, not a category ban on healthcare advertisers. Separately, the Personal Attributes ad standard governs ad copy rather than targeting: it bars an ad implying it knows your condition. “Do you have diabetes?” is out. “New diabetes treatment available” is expressly permitted.

Same practical outcome for a patient list. Different rule, different wording in an appeal, and worth knowing which one you are actually arguing about.

What “restricted health” actually covers on Google

The policy is narrower than the shorthand, and reading it matters because a practice may sit outside it.

Google’s health sub-policy restricts a defined list: physical or mental health conditions including diseases, sexual health and chronic conditions; products, services or procedures to treat or manage chronic conditions; health issues associated with intimate body parts or functions; invasive procedures including surgery, cosmetic surgery and injections; and disabilities.

A surgical practice is squarely inside that. So is anything managing a chronic condition. General wellness, routine dental and routine vision advertising aren’t on the list, and a practice in one of those categories should read the policy rather than accept a blanket “you can’t do audiences.”

What it closes for a practice inside the category

Remarketing to condition-page visitors. A list of people who read the carpal tunnel page is a list of people who probably have carpal tunnel. The list is the inference.

Customer Match from a patient list. Uploading patient contact details to target or exclude them means handing the platform a set defined by being patients of a medical practice. Google signs no business associate agreement covering Google Ads, so the disclosure question arrives alongside the policy one.

Lookalikes and similar audiences, because they are seeded from one of the two above.

Two things people find counterintuitive. It applies to exclusions as well as inclusions, since excluding current patients still requires uploading who they are. And I read it as covering a list you assembled entirely legitimately, because the policy language is about the category rather than about provenance. That reading is mine rather than a quote, so check it against the text if the exclusion case matters to you.

What is still open, including the parts usually left out

The “you lose less than you think” argument only works if it’s honest about what remains, and most write-ups on this understate it.

Search intent. Somebody typing “hand surgeon near me” has declared everything you need. You’re answering a question that was asked rather than inferring a condition from behavior. This is the engine for most practices.

Google’s own predefined audiences. The same health policy that blocks the ones you build explicitly preserves predefined Google audiences, in-market segments, affinity segments, demographics, life events, and custom segments. In-market and custom segments in particular are real targeting tools, they’re documented as available, and a practice told “no audiences at all” was told something the policy doesn’t say.

Geography. Radius targeting per office. For a practice this is a genuinely strong lever, because a patient who won’t drive to you isn’t a patient regardless of intent.

Time. Dayparting around when the phones are staffed. Worth more than most audience features, and the setting I find misconfigured most often. Serving at 8pm to a practice whose phones close at 5pm is buying voicemail.

Offline outcome import. A different mechanism from an audience, and the one that lets bidding learn which searches become appointments. Covered in how to track booked patients without sending PHI.

On the risk, stated accurately

I’ve seen this argued with a worst case presented as the expected case, so here’s the actual shape.

Google’s enforcement policy gives at least seven days’ notice before account suspension for ordinary violations, with immediate suspension reserved for egregious ones. Meta’s reported behavior is more often blocking a flagged audience at setup than pausing live campaigns. So the honest version isn’t “you wake up on Tuesday with everything off.” It’s that you’re running something the policy text says you can’t, you’ll probably be warned first, and the remedy involves an appeal and downtime you didn’t schedule.

That’s still a bad trade for a single-specialty practice. Remarketing’s upside here is modest, because the consideration window is short and the demand is already in search, and it reliably takes credit for conversions that were going to happen anyway. I wouldn’t run it, and I’d want an agency proposing it to explain in writing why they read the policy differently.

The general-service workaround, and its limits

Some practices remarket only from non-condition pages: homepage, about, locations. The argument is that a homepage visit implies nothing about anyone’s health.

I understand it and I don’t build on it. The practice is a single-specialty clinic, so everyone on its homepage is there for one category of medicine. Reaching for a page-level technicality against a category-level rule isn’t a position I’d want to defend in an appeal. If a practice wants to pursue it, that’s a conversation for counsel rather than a marketing judgment.

What to check on your account today

Read what audiences already exist. Practices that changed agencies inherit lists nobody remembers creating, and an old remarketing list still attached to a campaign is live exposure whether or not anyone is reviewing it.

Check observation settings too. An audience attached in observation mode rather than targeting mode is still an audience the account built.

Then check whether anything uploads a customer list on a schedule. Those integrations get installed once and run for years.

The free Google Ads Setup Audit covers the account-level version of this pass. It isn’t healthcare-specific, and the audience and conversion sections apply to a practice unchanged.