Straight answers to the questions doctors actually ask

TallBunnyMD does, directly. The design, the engineering, the search work, the ads, and the reporting are all handled by the studio, and the people on your discovery call are the people doing the work. Nothing is passed to a white-label vendor.

Yes. TallBunnyMD works exclusively with medical doctors and healthcare practices across the United States.

Staying in one field is deliberate: how patients search for care and what reassures them are patterns, and a studio that sees those patterns every day makes better decisions than a generalist.

A typical build goes live in four to eight weeks. The honest variable is the practice itself: photos, bios, and approvals move at your pace, so we set the real schedule together rather than promise a date here.

A few hours at the start, then very little. The front-loaded part is the discovery call, sharing photos and bios, and approving the design. After launch the system runs on our side, and your part is reading a short report in plain English.

30 minutes. Plain language. A roadmap, not a pitch. You leave knowing what is blocking patients and what to do first, whether you hire us or not.

No. Every build starts with your local market: your town, your specialty, and what patients there actually search for when they need care. The design is derived from your practice, which is why two clinics in the same specialty still end up with different sites.

No, and that refusal protects you. Rankings and traffic are set by systems nobody controls, so a guarantee about them is a guess dressed as a promise.

What we commit to is what we control: the work shipped each month and honest measurement of every inquiry, click, and booking in PulseTrack, so you judge the engagement on evidence.

12 specialties: Primary Care, Pediatrics, Cardiology, Dermatology, Orthopedics, OB/GYN, ENT, Ophthalmology, Urgent Care, Dental, Med Spa & Aesthetics, and Physical Therapy.

Each one is covered on the practices page, including how its patients actually search for care.

PulseTrack tracks the marketing system, not the patient. Every inquiry, click, and booking is measured and tied to the source that produced it, so you can see which channels turn into appointments and what each one costs.

It does not track health information: no conditions, no records, and no advertising profiles built from anyone's care.

No. PulseTrack measures sources and outcomes: where an inquiry came from and whether it became an appointment. It has no need for conditions, histories, or anything a patient would consider private, so none of it enters the system.

The place to be careful is your own forms. We keep them to what a receptionist needs in order to call someone back, with no free-text box asking what is wrong, because a marketing site is the wrong place for a patient to describe a symptom.

Measurement on your public marketing pages, plus a written list of every script on the site, what each one sends, and where it goes. Attribution needs a source and an outcome, so that is all we collect: which channel produced an inquiry, and whether it became an appointment.

We do not place advertising or analytics code inside a patient portal or a logged-in scheduling flow, we do not build advertising audiences from people who read about a condition, and we use no session replay tools anywhere. A cookie banner is not permission to share health information, so we never treat it as one. Where a service would handle information that could identify a patient, it signs a business associate agreement first, or we do not use it.

No. Nothing is installed, nothing is forwarded, and nothing changes about how your phones work. What we measure arrives through your website and your booking link, plus the call button taps Google already counts on your Business Profile and the calls your ad campaigns report themselves.

The honest consequence is that a patient who simply picks up the phone and dials your number is not attributed to any channel. We would rather that gap show in your report than close it with something sitting in the middle of your practice.

Your practice does. The analytics account, the Google Business Profile, and the ad accounts are set up in the practice’s name, so the record of what happened stays with you rather than inside an agency login.

You also get a written record of what each service collects, where it goes, and how long it is kept, dated and updated whenever something changes. If we part ways, the accounts and the history leave with you along with the site.

No, and neither is any other agency or marketing platform. There is no HIPAA certification to hold: the federal health regulator runs no program that certifies, accredits, or approves vendors, so a badge saying otherwise is a company vouching for itself.

What we can do is build the parts we control so they never need patient health information, and write down what each service touches so your privacy officer can check it rather than take our word for it. We are not attorneys and none of this is legal advice: anything involving patient data belongs with your own counsel or privacy officer, and we give them what they need to review it. The engineering behind that is written out on the compliance page.

Where one is needed, yes, and the more useful answer is that most of what we build never needs one. Where a company would handle information on your behalf that could identify a patient, it signs a business associate agreement before launch, or we do not use it. The fewer places that information can go, the less there is to protect.

The part worth knowing is which tools will not sign. Google Analytics does not, and Google says so in writing, which is a fact to have in hand before anyone puts it on a page where patients book. You get a list of every service involved in your marketing, what it is covered by and what it is not, written so your privacy officer can read it in one sitting and decide with your counsel.

Only with the patient’s signed permission on a form written for that purpose. A patient story and a before-and-after photo are both patient records, and cropping out a face does not change that, so nothing runs on a general photo release and anything comes down the day a patient changes their mind.

Reviews work the same way from the other side: every patient in the eligible group gets the same invitation, on the same trigger, with the same message. Asking only the pleased ones is called gating, the review platforms prohibit it, and the consumer protection regulator publishes it as an example of conduct that can be unfair or deceptive. We never buy, trade, gate, or write reviews, and a reply drafted for you never confirms whether the person is a patient.

Yes, as a build gate rather than a line item. Pages are built to WCAG 2.2 AA and stated as conforming to WCAG 2.1 Level AA, tested in both color themes with automated checks and by hand, and a page does not ship failing them. We test the third-party widgets on your site too, because you are answerable for them.

The legal side is genuinely in motion: two federal web accessibility deadlines moved in 2026 and both extensions are being challenged in court, so we will not sell you a date. What you get is a dated audit of your own site, and what it means for your practice is a question for your counsel. The standard this site holds itself to is written on our accessibility statement.

Four flat monthly plans: Pulse at $795/mo, Stride at $1,295/mo, Apex at $1,595/mo (the most popular), and Summit at $2,095/mo.

Every plan includes Custom Website Design, SEO, Social Media, and PulseTrack. The line-by-line comparison is on the pricing page.

No. Ad spend is separate and additional: the money that goes to Google or another ad platform is distinct from the plan fee, which covers the strategy, the build, and the management of the campaigns. We recommend a budget for your market on the discovery call, and you always see the two numbers separately.

Your practice does. The domain, the design, the content, and the code belong to the practice, not to us. Infrastructure you only rent is leverage someone else holds, and we build the opposite.

You keep the website, the domain, and everything made for the practice. Ownership is the point: leaving is a handover, not a negotiation.

The practical details, like timing and transition, are walked through plainly on the call.