Medical Website Design: What Actually Constrains the Build

The first question on a medical website project is not what it should look like. It is whether the site will touch protected health information. Under the HIPAA Privacy Rule, a covered entity must have a Business Associate Agreement in place with any vendor that creates, receives, maintains or transmits PHI on its behalf. That includes your host, your form processor and, in practice, your analytics.

This is where template-first projects come apart. An appointment request that captures a reason for visit is PHI. A contact form that asks about symptoms is PHI. Many shared hosting plans and form widgets will not sign a BAA at all, which means the decision has already been made for you before a single page is designed.

WCAG 2.2 became a W3C Recommendation in October 2023 and is the standard most healthcare procurement now references. In the United States, the Department of Justice's 2024 rule under Title II of the ADA set WCAG 2.1 Level AA as the technical standard for state and local government web content — which captures public hospitals and health departments directly, and shapes expectations for everyone else.

For a clinic site the practical work is unglamorous: real text instead of text baked into images, colour contrast that survives a bright screen, forms whose labels are attached to their inputs, and a page you can complete with a keyboard alone. Patients using screen readers or magnification are disproportionately likely to be the ones who need the appointment.

Google's Core Web Vitals give a concrete target: Largest Contentful Paint of 2.5 seconds or less is rated good, and the assessment is made at the 75th percentile of real visits. That percentile matters — it means the site has to be fast on an average phone on mobile data, not on the designer's laptop.

The usual culprits on medical sites are predictable: uncompressed stock photography, an embedded scheduling widget that loads its own framework, and a chat script nobody has audited since launch. Each is fixable, and each is easier to avoid than to remove.

Strip away the brochure instinct and a patient-facing site has a short list of jobs. Most visits are someone trying to complete one specific task, usually in a hurry.

• Confirm you treat their condition and accept their insurance.
• Show where you are, when you are open, and how to get there.
• Let them book or request an appointment without a phone call.
• Answer the handful of questions that otherwise become phone calls.

Everything else — the practice history, the philosophy of care, the stock photograph of a stethoscope — is secondary to those four. If you are scoping a build, our web development services start from that task list rather than from a page count.