Key takeaways
- Give each location, eligible department and public-facing doctor an accurate Google profile linked to its own page.
- Publish only facts patients can check: NMC's October 2026 guidelines bar "best" claims, testimonials and fake reviews.
- Collect only the patient data you need, explain why beside the form, and keep it out of analytics and personal phones.
Local SEO for hospitals in India comes down to three jobs. Give each location, eligible department and public-facing doctor an accurate Google Business Profile. Back each profile with a page that answers a patient’s practical questions. Then handle reviews and patient data the way both Google and Indian rules allow.
That last job matters more than it used to. On 6 October 2026, the National Medical Commission (NMC) issued guidelines that limit what doctors and hospitals can claim online. The Digital Personal Data Protection Act covers the patient details your forms collect. The useful news: the plain, factual pages Google rewards are also the pages those rules allow.
I have not run local SEO for a hospital or clinic. This guide rests on Google’s documentation and the NMC and MeitY texts. Where I use local SEO work I led at Adtric, it is for a school, and I say so.
Know what NMC allows before you optimize anything
Doctors in India cannot promote themselves the way a restaurant can. The base code is still the Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002. NMC’s 2023 replacement regulations were held in abeyance in August 2023, and the 2002 code applied instead.
The 2002 regulations call soliciting patients unethical, whether by a physician or an institution. NMC’s new Guidelines on Ethical Advertising and Public Communication came into force on publication. They treat promotional content on search engines, platforms, websites and social media as advertising.
Broadly, the guidelines allow:
- Facts about the hospital: name, location, contact details, departments, facilities, services, emergency services, accreditation and charges (clause 8.3).
- A doctor directory: names, recognized qualifications, specialties, registration details and availability (clause 9.1).
- New equipment or services: stated as fact, without superiority claims (Explanation II to clause 3.2).
- Health education: information that is not promotional and not meant for commercial benefit (Explanation I).
They rule out:
- “Best”, “No.1”, “leading” or “top” unless objectively verifiable (clause 8.1(ix)).
- “Guaranteed cures”, “100% success”, “painless treatment” and similar claims (clause 8.1(iii)).
- Testimonials, promotional patient stories and “before and after” photos, even with consent (clauses 8.1(v) and 6.2).
- Fake or paid reviews, and manipulating search rankings or visibility to mislead (Explanation V and clause 8.1(xii)).
- Discounts, coupons or free procedures likely to encourage unnecessary care (clause 8.1(x)).
- A doctor’s photograph used as self-advertisement (clause 9.2).
For SEO, the biggest change is wording. Title a page “Cardiologist in Kankarbagh, Patna”, not “Best cardiologist in Patna”. Patients will keep typing “best”; answer them with facts they can check.
Two more clauses matter. A doctor’s online posts should show their name, qualifications, registration status and SMR/NMR number (Explanation III). And clause 8.1(ii) says an RMP shall not “engage any third party for marketing medical services”. If you are a doctor in private practice, ask your adviser how that applies before you hire anyone, me included.
Hospitals also answer to the Clinical Establishment Act or their state’s Act, which overrides the guidelines in a conflict (clause 4.3). I am an SEO consultant, not a lawyer, so take legal advice on your own case.
Set up Google Business Profiles for the hospital, its departments and its doctors
Google’s guidelines for representing your business treat each of the three separately.
The hospital or clinic
Each location gets one profile, and Google says not to create more than one per location. Search Google Maps for your name and address, and resolve any duplicates first.
Use your real-world name, as it appears on your signboard. Google does not permit taglines, location information or phone numbers in the name. “City Hospital – Best Multispeciality Hospital in Patna” breaks Google’s rules and NMC’s at once.
Choose categories that complete the sentence “This business IS a”, as few and as specific as possible. Google asks for a local number instead of a central call center helpline whenever possible.
Link the profile to that location’s page, not the homepage. Google asks for a website that represents the individual location. To let patients book, add your own appointment page under Booking. The same help page explains how to remove an unwanted third-party booking link.
Hours
Wrong hours send a patient to a closed door. Add special hours ahead of festivals and holidays. If a service keeps different times, Google’s “More hours” setting is meant for that.
Clinics that see patients only by appointment are different. Google says businesses that “operate only by appointment” shouldn’t provide hours.
Departments
Departments within hospitals may have their own profiles if they are public-facing and operate as distinct entities. Google says such departments typically have a separate entrance and a distinct category. Each name must differ from the hospital’s, as in Google’s example “Massachusetts General Hospital Department of Dermatology”.
Put each department’s hours on its own profile. A specialty that runs from the main OPD with no separate entrance may not pass Google’s test.
Doctors
Google treats doctors as individual practitioners. A doctor can have a dedicated profile if they are public-facing and can be contacted at the verified location during stated hours. “Dr.” and degrees are allowed in the name.
Where several doctors practice, the hospital keeps its own profile, and each doctor’s profile carries only the doctor’s name. A doctor who is the only practitioner at a branded clinic should share one profile named “[Brand]: [Doctor name]”. One doctor should not have several profiles for different specialties.
If a doctor consults at more than one place, apply the same test to each. Create a profile only where the doctor can really be reached during the hours you list.
Directories and ranking
Patients in India also find doctors on platforms such as Practo and directories such as Justdial. Keep names, addresses, phone numbers and timings there identical to your Google profile. NMC also requires healthcare platforms hosting doctors to prohibit paid ranking of doctors (clause 9.4).
On Google, there is no way to pay for a better local ranking. Local results are mainly based on relevance, distance and prominence.
Build a page for every location, department and doctor
Pages turn a search into a visit. In my book Decoding The Click, I compare a website’s first seconds to emergency room triage. On a hospital site, the visitor may be an actual patient in a hurry. I explain the idea in the 5-second rule.
| Page | What a patient needs to see |
|---|---|
| Location | Full address, map, a nearby landmark, parking, phone, hours, the emergency number, and the departments here |
| Department | Conditions treated and services in plain words, the doctors and their OPD days, how to book, and charges if you publish them |
| Doctor | Name, recognized qualifications, specialty, registration number with the council’s name, OPD days at each location, how to book |
| Emergency | The 24-hour number, the ambulance number, and how to reach the emergency entrance |
The doctor page mirrors what NMC allows in a hospital directory. It also matches what the 2002 code allows on a signboard, including the registration number and the State Medical Council’s name.
Write titles and headings around specialty and area, the way patients search: “Orthopedic surgeon in Boring Road, Patna”. Link each page from its Google profile. Keep URLs stable, and when a doctor leaves, redirect their page to the department page.
A parallel from school SEO
The closest work I can show is a CBSE school with two campuses in Greater Noida West. My team at Adtric built its titles, headings and copy around area names and the board parents search for. Each of 57 tracked admission searches was mapped to one target page (case study).
Between December 2024 and June 2025, the main campus went from page one for 1 of 31 tracked searches to 28 of 31. When the second campus opened in Sector 10, we gave it its own section of the site so the two would not compete in Google. Its monthly visits from Google grew from 127 in September 2025 to 739 in March 2026.
For a hospital group, read “specialty” for “board” and “branch” for “campus”. I describe the method in SEO for schools.
Handle reviews within both Google’s and NMC’s rules
Google says more reviews and positive ratings can help local ranking. In Indian healthcare, though, you cannot chase them the way a café can.
Google’s tips page says you can ask customers to review you through a Google link or QR code. Its content policy bars these:
- Incentives such as payment, discounts or free services.
- Discouraging negative reviews, or asking only happy customers.
- Pressuring people to review on the premises.
- Staff review quotas, or asking for reviews that identify a staff member.
- Reviews from current or former employees.
NMC goes further. Explanation V bars soliciting, buying or manipulating fake, paid or misleading reviews. It also says an RMP “shall not request or share patient testimonials, recommendations, endorsements or reviews for professional promotion on social media”. The guidelines define social media broadly, as websites and apps where users create and share content.
Whether a review card at reception crosses that line is not spelled out. My practical reading: no review drives for individual doctors, and no resharing of reviews on social media or your site. If the hospital wants to point patients to a feedback link, get legal advice first and treat every patient the same way.
Reply without breaking confidentiality
Replies are where you can do the most good. Google’s tips say to be professional, keep it short, and never share a reviewer’s private information. In healthcare, never confirm that the reviewer was your patient. Never mention a diagnosis, treatment or visit date.
Doctors already carry this duty: the 2002 regulations say patient confidences “should never be revealed unless their revelation is required by the laws of the State”. A safe reply looks like this:
Thank you for taking the time to write this. We take every concern seriously and want to look into it. Please call our patient relations desk on [number] or write to [email].
It thanks the reviewer, confirms nothing about them, and moves the conversation somewhere private. Google checks each reply against its content policies before it goes live.
Publish health content signed by a named doctor
Health is what Google calls a “Your Money or Your Life” topic. Google says its systems give even more weight to strong E-E-A-T on topics that could significantly affect health. It also asks whether pages carry a byline where one might be expected.
NMC points the same way. A hospital’s online posts should name the doctor, with qualifications, registration status and SMR/NMR number (Explanation IV). So sign every health article with the doctor who wrote or reviewed it, and link the byline to their doctor page.
Write what local patients need before a visit. Cover what to bring to a first OPD appointment, how to prepare for a test, and how to reach the emergency entrance at night. Seasonal topics work too, such as dengue precautions before the monsoon. Keep it educational, not promotional (Explanation I).
Leave out case stories unless they serve scientific or educational purposes, with anonymized consent (clause 8.1(v)). If AI helps you draft, read clause 7.2. It bars AI-generated promotional campaigns for commercial gain, and any permitted AI-generated promotional content must be marked as AI. AI must never create or alter a patient’s image, testimonial or outcome.
I cover bylines and author pages in my guide to showing first-hand experience.
Add LocalBusiness structured data, and skip review stars
Structured data helps Google read your location details, though Google guarantees no search feature from it. Its local business documentation requires name and address. Recommended properties include telephone, url, geo, openingHoursSpecification and department.
Google says to use the most specific LocalBusiness subtype possible. On schema.org, MedicalClinic, Hospital, Physician and Dentist all sit under LocalBusiness. Google’s page does not name them, but they fit its rule. A minimal clinic example, with placeholders:
<script type="application/ld+json">
{
"@context": "https://schema.org",
"@type": "MedicalClinic",
"name": "[Clinic name, as on your signboard]",
"url": "https://www.example.com/locations/kankarbagh/",
"telephone": "+91-[local number]",
"address": {
"@type": "PostalAddress",
"streetAddress": "[Building, road]",
"addressLocality": "Patna",
"addressRegion": "Bihar",
"postalCode": "[PIN code]",
"addressCountry": "IN"
},
"openingHoursSpecification": [{
"@type": "OpeningHoursSpecification",
"dayOfWeek": ["Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"],
"opens": "09:00",
"closes": "20:00"
}]
}
</script>
Two cautions. Google recommends aggregateRating and review only for sites that capture reviews about other businesses. Its review snippet guidelines make self-serving reviews ineligible for stars, so do not mark up your own reviews. And mark up only what the page shows, as Google’s general guidelines require.
Protect patient data in forms, WhatsApp and analytics
Appointment forms, call records and WhatsApp chats all hold personal data. The Digital Personal Data Protection Act, 2023 covers digital personal data, including paper records digitized later. A hospital that decides why and how that data is used is a Data Fiduciary.
Under the Act, consent must be “free, specific, informed, unconditional and unambiguous”, limited to the data the purpose needs (section 6(1)). A consent request must come with a notice (section 5(1)). The hospital must take reasonable security safeguards (section 8(5)), and erase data once the purpose is served (section 8(7)).
The DPDP Rules were published in the Gazette on 13 November 2025. The rules on notice, security safeguards and breach reporting (rules 3, 6 and 7) start eighteen months after publication. Check MeitY for the current position before you plan around dates. These steps make sense either way:
- Ask only what you need to call back: name, phone, department or doctor, and preferred day. Leave symptoms out unless the clinic truly needs them before the visit.
- Put a short notice beside the form: what you collect, why, how to withdraw consent and how to complain. Rule 3 lists these items.
- Keep form details out of analytics: Google’s Analytics help says its policies forbid passing personally identifiable information to Google. It often leaks through URLs, page titles and form fields.
- Run patient WhatsApp from a business account the hospital controls, not a staff member’s personal phone. Rule 6 asks for access controls and access logs.
- Secure where submissions land: if your site stores form entries, a hack can expose them. My WordPress security checklist covers the basics.
- Keep patient data out of AI tools unless your privacy and confidentiality duties allow it (NMC clause 7.2(d)).
This is practical guidance, not legal advice. Have your lawyer check the notice wording.
Measure calls, bookings and directions, not just rankings
Patients through the door are the goal, not rankings. Your Business Profile’s performance report shows calls, direction requests, website clicks, messages, bookings and the search terms people used. Calls count taps on the profile’s call button, so the profile needs your phone number.
On your site, mark appointment form submissions as key events in GA4. Google’s recommended event for a submitted form is generate_lead. Track taps on call and WhatsApp buttons too.
Check “near me” rankings from the area around each location, because Google weighs the searcher’s distance. A report run from another city tells you little.
If you hire help, pay for work, not patients. NMC bars agency or platform fees “linked to the procurement or referral of individual patients” (clause 8.1(viii)).
Where to start this month
Audit your Google profiles for duplicates, keyword-stuffed names and central helpline numbers. Remove “best” and “No.1” from your site and listings. Build doctor pages with qualifications and registration numbers, and add a plain data notice to your appointment form.
If you want an outside check, a website SEO audit covers your local listings, location and doctor pages, and structured data. Bring your legal adviser in for the NMC and DPDP questions.

