The 7 Stages of Privacy-First Performance Marketing

Nirvana released “Come as You Are” as a single on February 18, 1992.

While more than a few of the talented marketers on our team weren’t born yet, they know this is how we approach each new client.

Over the years we’ve been helping brands in privacy-first industries, we’ve found that most come to us knowing they need help but not quite knowing what kind.

In some cases, their advertising just isn’t as effective as they need it to be. In other cases, they’ve been told that they’ve topped out on efficient volume. In yet other cases, their marketing team is struggling to know anything about their performance because compliance has ripped out the tracking pixels on their site.

For us, it makes no difference how the patient presents. We just know we need to find a way to diagnose the issue and move the client toward their business goals.

With over a decade of experience supporting healthcare and medical device marketers, we’ve noticed the patterns and key attributes that define the next step.

With this information, we’ve created the Seven Stages of Compliant Performance Marketing, which helps us quickly identify where a brand sits, and what the next best step is.

The framework runs along a single spectrum, from wasted spend and drag on one end to compounding performance on the other. Every brand we meet sits somewhere on that line, and every stage carries its own presenting complaint, its own root cause, and its own next move. Here’s what the seven stages look like in practice.

Stage 1, Exposed: Paid Media Running on Non-Compliant Tracking

This is where a lot of brands start, whether they know it or not. Campaigns are humming, the pixels powering them shouldn’t be on, and performance marketing is running on data that was never built for a HIPAA-compliant environment. The primary pain here isn’t a performance problem yet. It’s an exposure problem. Every dollar of media spend is riding on data flow that hasn’t priced in the compliance risk it’s carrying, and the marketing team usually doesn’t know it until something forces the issue: a legal review, an OCR guidance update, a platform’s own crackdown on tracking.

Stage 2, Dark or Grounded: Spend Frozen While Compliance Catches Up

Once that exposure surfaces, the instinct is almost always defensive. Spend gets pulled back or frozen outright while compliance and legal sort out what’s safe. We understand the instinct, but this is where pipeline starts to soften and growth targets start slipping, because the team doesn’t yet have a confident, compliant path back to scale. They’re not moving forward. They’re not moving at all.

This is the point where closing our first infrastructure gap matters most: server-side tracking. Is the measurement infrastructure compliant? If not, that’s the first step to stabilizing the patient. We move measurement from the browser, client-side, to our own servers, server-side. This gives us control of the data being collected and shared, and it’s what lets a brand come back online with confidence instead of exposure.

Stage 3, Platform-Dependent: Auto-Bidding and PMax Optimizing on Thin Signal

With compliant tracking restored, brands land here, and it’s a better place to be, but it’s not yet a stable one. Auto-bidding and Performance Max are running the media. The platforms’ own algorithms are making allocation decisions, and those decisions are only as good as the signal feeding them, which at this stage is still thin and biased toward whatever the platform can see on its own. Spend concentrates in low-incremental audiences. ROAS looks fine on paper. New customer growth doesn’t move.

Stage 4, First-Party Data Foundation: Optimizing to Form Fills, Not Revenue

This is where we close the second gap: standing up first-party data strategy and warehousing. We organize and store the data we’re collecting so we can analyze full-fidelity information and combine multiple data sets from across platforms into one source of truth. Brands at this stage are usually optimizing to form fills, every channel hitting its target, and that’s real progress. But it’s also where a familiar pain shows up: the pipeline still doesn’t move the way the form-fill numbers suggest it should, because channels are claiming overlapping credit and form-fill volume isn’t the same thing as revenue.

That’s the point where we start aligning the KPIs we use to judge performance with the business value they’re supposed to represent, and it has to evolve quickly through the next three stages.

Stage 5, Connected: Sales Disposition Data Feeding Back Into Media

Leads get connected to what sales actually does with them: which ones convert, which ones don’t, and why. That disposition data feeds back to media as a real signal instead of a proxy. It’s a meaningful jump, because quality finally has a source of truth. But quality still isn’t revenue, and sales and marketing can still find themselves debating whether a lead was ever really a lead.

Stage 6, Descriptive: Optimizing to Closed-Won Revenue and Margin

Here, the loop closes. Business outcomes get joined to media decisions directly, and the brand starts optimizing to closed-won revenue and margin, not form fills. This is the stage where our HIPAA-compliant marketing data warehouse, Compass, starts doing its most important work, connecting realized revenue back to the channel, campaign, and audience that produced it. The remaining pain is timing: revenue is lagged, and today’s bid is still optimizing against deals that closed last quarter.

Stage 7, Predictive: Bidding Against Estimated Revenue in Real-Time

This is the stage every brand on this spectrum is working toward, whether they’d describe it that way or not. Media decisions get made against estimated revenue in real time. Real-Time Propensity Modeling and Media Mix Modeling (MMM) work together to inform bidding, budget, and creative before the deal ever closes, closing the gap between action and outcome that defines every stage before it. This is also where the third infrastructure investment, audience signal, does its work across every stage from First-Party Foundation forward: the difference between reacting to what already happened and directing spend toward what’s likely to happen next.

How to Identify Which Stage Your Brand Is In

Each step in this maturity path gets a client closer to the moment of value creation. In healthcare and MedTech, that’s a harder problem than it is in ecommerce, because of the lag time between when a user completes a desired action and when they actually show up for an appointment or purchase a device. Closing that lag, stage by stage, is the whole exercise.

Getting a brand from Stage One to Stage Seven requires tight coordination between our team and the client’s own marketers and leadership. It requires trust that’s earned from delivering measurable performance, even with suboptimal infrastructure, as is often the case at the start. It takes time to build.

But as that trust is built, and we’re given more access to data that helps us understand how and when and where business value is created, we leverage Compass, our HIPAA-compliant marketing data warehouse, and the systems we’ve built around it, including Real-Time Propensity Modeling, to deliver ever more value.

And that’s the whole point of the framework. It’s not a grading system. It’s a diagnosis. Wherever a brand shows up on this spectrum, exposed, grounded, platform-dependent, or already predictive, we start from where they actually are, not where we wish they were. Come as you are. We’ll help you find the next stage.