Most ABA groups respond by hiring a healthcare marketing agency. The catch: the traditional agencies that show up for "ABA therapy marketing agency" run the same playbook they run for hospital systems — $10k+/month retainers, 6–12 month contracts, and a stack assembled from other people's tools (a CallRail here, a HubSpot there, a resold tracking vendor with its own BAA and its own bill). They can buy you clicks. They can't see whether the click became an intake appointment on your practice management schedule, they can't answer your phone at 6:40pm when a parent finally has a free minute, and every vendor they bolt on is another BAA you have to chase and another place a child's data can leak.

This guide covers what actually grows an ABA group in 2026 — the demand channels, the compliance floor, and the operational layer between "parent clicked" and "child is on a BCBA's schedule" that decides whether marketing spend turns into census.

Why ABA marketing is different from generic healthcare marketing

Three structural facts change the playbook:

The buyer is a parent in a long, emotional research cycle. Unlike urgent care, nobody impulse-books ABA. Parents compare providers for weeks, ask about waitlists, and care intensely about credentials (BCBA supervision ratios, RBT turnover) and philosophy (naturalistic vs. table-based, parent involvement). Your content has to answer those questions in plain English, and your intake team has to be reachable when parents call — which is disproportionately evenings and lunch breaks.

Insurance and funding drive conversion, not price pages. "Do you take my insurance / our state's Medicaid waiver?" is the first question on almost every call. If your marketing generates inquiries your funding mix can't serve, you're paying to disappoint people. Campaign structure should mirror payer reality: separate campaigns (and landing pages) for commercial-insurance markets vs. Medicaid-heavy markets, with intake screening questions built into the booking flow.

Every data point is doubly sensitive. ABA inquiries are health information about minors. That means the standard med-spa tracking stack — Meta Pixel firing on the thank-you page, GA4 with default settings, chat widgets that ship transcripts to a SaaS vendor without a BAA — is off the table entirely. Compliance isn't a checkbox for ABA marketing. It's the architecture.

The demand channels that fill BCBA capacity

Local SEO and Google Business Profiles per clinic

Parents search "ABA therapy near me," "autism therapy [city]," and diagnosis-adjacent terms ("my 3 year old isn't talking"). For a multi-clinic group, that means one properly built location page per clinic — real address, hours, service lines, insurance accepted, staff credentials — and a Google Business Profile that's actually managed: categories right, hours synced, reviews answered, photos current. In groups with 5–30 locations, it's common to find a meaningful share of GBPs drifting (wrong hours, unclaimed duplicates, a closed clinic still showing). Each drifting profile is a parent calling a dead number.

Paid search on decision-stage terms

ABA paid search is expensive because private-equity-backed groups bid on the same twenty keywords. You win on two things the big-agency accounts consistently miss: negative-keyword hygiene (exclude job seekers — "ABA therapist salary," "RBT jobs" — which can be half of raw impressions) and conversion signal quality. If your account optimizes toward "form fill," Google happily buys you form fills from families you can't serve. If it optimizes toward scheduled intake appointments — sent back to the ad platform as a conversion event without any form contents attached — the algorithm learns which clicks become census. That closed loop is the entire difference between ABA accounts that scale and ones that plateau; we cover the mechanics in what closed-loop PPC actually means.

Referral-source content

Pediatricians, diagnosticians, school districts, and parent groups drive the highest-converting inquiries. Content that serves them — "what to tell parents after an autism diagnosis," waitlist transparency, insurance navigation guides — earns links and referrals simultaneously. This is slow-compounding and almost no ABA competitor does it well; most agency-built ABA sites are thin service pages stamped out from a template.

After-the-click: the channel nobody budgets for

An ABA group's biggest leak is rarely traffic. It's the gap between inquiry and intake: calls that ring out at 5:15pm, web forms answered two days later, waitlist follow-ups that never happen. Marketing agencies don't touch this because it isn't media. It's operations — and it's where the next section lives.

The intake layer: where ABA marketing spend actually dies

Walk the parent's path honestly:

1. Parent clicks an ad at 9pm after the kids are asleep.
2. Your site offers a contact form. Parent fills it out (or doesn't — 9pm is also when motivation is highest to just book something).
3. Form lands in a shared inbox. Intake coordinator sees it at 10am, calls back, hits voicemail.
4. Three rounds of phone tag. A meaningful percentage of families quietly book with whoever answered first.

Now the version we ship:

Real-time scheduling, integrated with your EHR or practice management system. PilotPractice's booking widget connects to 30+ EHR/EMR and practice-management systems, so the slots a parent sees at 9pm are your actual intake availability, and the booking lands directly on your schedule — not in an inbox. The widget collects what intake needs (including date of birth where the system requires it to create the chart), and every step of the flow is micro-event tracked so you can see exactly where parents drop off and fix it. More on why EHR-integrated beats bolt-on calendars in HIPAA-compliant online scheduling.

An AI receptionist that answers when intake can't. Evenings and lunch hours are peak parent-call time and trough staffing time. PilotPractice's voice AI receptionist answers those calls, handles scheduling against real availability, and escalates to a human when a call needs one. Critically for ABA, it's built for healthcare: a medical guard layer blocks it from giving clinical advice or making diagnostic claims, automated replies are capped and human-in-the-loop by design, every AI interaction is compliance-logged, and a fail-closed egress guard means that when a safety check can't complete, the AI says less, not more. The same guardrails apply to website chat.

Encrypted, audited data handling underneath all of it. Every lead, message, call record, and file in the platform is field-level encrypted. PHI access is tracked in an append-only audit log, logins are monitored for impossible travel and new devices, and insider-threat analytics score unusual PHI access. For an organization whose records describe children, "who looked at this family's data and when" should have a one-query answer. Here it does.

The compliance floor for ABA marketing (2026)

Ungated checklist — run your current setup against it:

• No third-party ad pixels on pages that reveal intent. A Meta Pixel or Google tag on your "schedule an evaluation" page transmits identifiable visit data about a child's suspected diagnosis. Conversion data should reach ad platforms server-side as stripped events (event name, click ID, value) — never form contents. See the HIPAA-compliant retargeting playbook.
• First-party analytics only, PII-scrubbed. GA4 out of the box is a problem; the answer is a first-party forwarder design — synthetic client IDs, whitelisted parameters (the architecture we're building into our platform) — that keeps your reporting without the disclosure.
• BAAs with every vendor that touches inquiry data — forms, chat, call tracking, scheduling, email. If your agency assembled five tools, that's five BAAs, five subprocessor lists, and five renewal dates. Count yours.
• Intake forms that never sit in a WordPress database. Form entries should post server-to-server to an encrypted system of record, not persist in a plugin table on a marketing site.
• Chat and AI tools with healthcare guardrails and audit logs. "The vendor says it's fine" is not a control. Ask to see the compliance log.
• Minor-specific hygiene: no testimonials or photos identifying children without documented authorization; patient galleries (if any) noindexed.
• A written answer to "where does a parent's data go when they click our ad?" If nobody on your team can diagram it, you don't control it.

The HIPAA-compliant marketing pillar covers each item in depth. The short version: with a traditional agency stack, compliance is a coordination project across vendors. With an owned platform under one BAA, it's the default.

Measuring ABA marketing: CAC per kept intake, not modeled ROI

Traditional agencies report media metrics (impressions, clicks, CPL) and, at the high end, modeled ROI — media-mix estimation that infers your revenue lift statistically. Modeled attribution exists because those agencies can't see your schedule. They stop measuring at the form fill because that's where their stack ends.

When the booking system writes directly to your EHR/PM schedule, you don't have to model anything. The chain is literal: ad click → tracked first-party session → booked intake → appointment kept or no-showed on the schedule. That yields the only two numbers an ABA operator actually needs per channel and per location: cost per kept intake appointment and, over time, cost per admitted client. Campaign 3 at the Northside clinic produced 11 kept intakes at $212 each; campaign 5 produced 40 leads and 2 kept intakes. One of those gets the budget. We break the whole argument down in modeled ROI vs. kept appointments.

This is also the honest way to manage waitlists: if a clinic is at BCBA capacity with a 10-week waitlist, closed-loop data tells you to shift spend to the under-census clinic this week — not next quarter when the modeled report lands.

What a group of 1–50 locations should actually do

The enterprise healthcare agencies aren't built for you — their economics start at $10–49k/month and their case studies are hospital systems and PE platforms. Meanwhile the local generalist agency doesn't know 42 CFR from GA4. ABA groups between one clinic and fifty sit in the gap.

The do-it-yourself version of this playbook: build real location pages, manage every GBP weekly, run paid search with job-seeker negatives and server-side conversion tracking, put EHR-integrated booking on every page, answer every call, and audit your tracking stack quarterly against the checklist above. All of it is doable in-house if you have the engineering and the intake staffing.

The done-for-you version is PilotPractice: the HIPAA-safe site, the EHR-integrated booking widget, the owned first-party tracking, and the AI voice receptionist and chat ship as one system under one BAA — with a healthcare-only team running SEO, paid, and GBPs on top of it, priced for groups of 1–50 locations, and reporting in CAC per kept appointment because the platform can actually see it. It's the operations layer described in behavioral health group marketing and the multi-location enterprise pillar, applied to autism care.

Your BCBAs' calendars are the scoreboard. If your current marketing can't tell you what a kept intake costs, it isn't measuring the thing you're paying for.

See it live: book a 20-minute demo — we'll walk your current tracking stack and show you what closed-loop looks like on your own intake schedule.