CareRM
Is your website working for your practice, or against it?
A free audit of the seven things that decide whether your dental website brings in new patients or puts your practice at risk: patient privacy, security, phone speed, mobile, Google search, AI assistants and accessibility.
- Free, and yours to keep
- No login or access needed
- Report by email in minutes
Seven checks. One plain report.
We load your home page and the pages your site lists, the way a new patient's phone does, and record everything that happens. Then we check the seven things that matter most for a dental practice.
-
Patient privacy and HIPAA risk
An appointment request is health information. If a tag on your request page tells Meta or Google that someone asked for an appointment, patient information is leaving your site. It's the first thing we look for.
What we look at: Ad and analytics tags, what loads before consent, personal details sent to other companies, where your forms send answers, heatmap tools, your privacy policy link.
-
Security
An expired certificate puts a “Not secure” warning in front of patients. Missing protections make a site easier to break into or copy.
What we look at: HTTPS and redirects, certificate expiry, TLS version, security headers, mixed content, software versions on show.
-
Speed on a phone
Many patients look you up on a phone, often in a hurry. A page that is slow to appear loses them before they find your number.
What we look at: Lighthouse on a phone, how fast the main content appears, layout shifts, image weight, server response, caching and compression.
-
How it works on a phone
Buttons too small to tap, text too small to read and pages that slide sideways make people give up before the request form.
What we look at: Sideways scrolling, text size, tap targets, the viewport tag, broken images, page errors.
-
Google search
Google works out what each page is about from tags visitors never see. When they're missing or repeated, the right page doesn't show up for the right search.
What we look at: Titles and descriptions, one main heading per page, canonical tags, sitemap, robots.txt, structured data, link previews.
-
AI assistants
Patients now ask ChatGPT and Google's AI answers for a dentist nearby. We check whether those tools may read your site, and whether it tells them who you are, where you are and what you treat.
What we look at: Which AI crawlers your site allows, business and FAQ structured data, llms.txt, pages too thin to quote, question-style headings.
-
Accessibility
Every patient should be able to ask for an appointment, including people who use a screen reader, a keyboard or larger text.
What we look at: Tested against WCAG 2.2 AA: contrast, form labels, image descriptions, headings, keyboard focus, zoom.
We check from the outside, as far as a browser can see. We never log in to your site or see patient records.
A website nobody checks keeps changing.
-
It changes hands.
An agency adds a tag to measure an ad. A plugin update changes a form. A new web company takes over.
Nobody writes down what each piece does, or who it reports to.
-
An appointment request is health information.
The treatment page someone read, and the fact that they asked for an appointment, can say something about their health.
A tag that passes those to an ad company is the part worth checking first.
-
Your monthly report won't show it.
Reports count clicks and form fills. They don't show a slow phone page, a blocked AI crawler or a tag on the request page.
So the question rarely comes up until someone asks it.
What lands in your inbox.
A link to your report, usually within a few minutes. It's written for a practice owner, not a developer.
- Fix this first: the one to three changes that matter most, patient privacy first.
- Every finding by area, in plain words: what it is, why it matters and what to change.
- Your phone speed score, and how many issues each area has.
- Yours to keep, whether you work with us or not. Bring it to whoever runs your site.
How it works
- You enter your website and email Two fields, under a minute.
- The audit runs on its own Nothing to install, no access to give, nobody to brief.
- Your report arrives by email Usually within a few minutes, as a link to your report.
- Patient privacyAn ad tracking tag loads on your pages
- AI assistantsYour site blocks AI search assistants
- Speed on a phoneThe main content takes too long to appear on a phone
- Patient privacy and HIPAA risk3
- Security2
- Speed on a phone4
- How it works on a phone1
- Google search3
- AI assistants2
- Accessibility5
Who runs the audit.
CareRM hosts dental websites on our HIPAA platform and sends request forms down a path built for patient information. Meta learns that a lead came from its ad. Never the person's name, email, phone number or anything they typed.
- 1
- business associate agreement covers hosting, forms and calls
- 0
- patient lists uploaded to Meta or any ad platform
“It was an easy experience to work with you.”
Questions practices and DSOs ask
Is the website audit really free?
Yes. The audit and the report are free, and you keep them. If you want help with what it finds, the report shows you how to reach us.
Do you need access to our website?
No. We check from the outside, the way a patient's browser loads your pages. We never log in to your site or see patient records.
Will the audit slow down or affect our site?
No. It loads up to a dozen of your pages once, with a pause between them, about as much as one visitor reading around.
Is this a HIPAA audit?
No. It's a technical audit of what your pages do and send, as far as a browser can see. It isn't a compliance audit or legal advice, and it doesn't replace your own risk assessment.
Our agency built our site. Will this cause trouble?
It gives you a list to bring to them. Inherited setups are common, and a clear list keeps the conversation short.
We're a DSO. Can you audit every location?
Send one location's site and tell us how many you run. We'll audit that one first and tell you what it would take to audit the rest.
What if you find a problem?
The report says what it is and what to change. You can fix it with whoever runs your site, or ask us. CareRM hosts dental websites on our HIPAA platform with secure request forms, and one business associate agreement covers hosting, forms and calls.
P.S.
If you only read this: patients, Google and AI assistants look at your website before anyone calls. The audit shows you what they find, and what your site sends to ad companies, before it costs you a patient, or a fine.
It's free, it's two fields, and the report lands in your inbox in minutes.