The 2026 Audit Checklist for Long-Term Rehab Search Visibility

Technical work should prove that search engines can access the right pages while sensitive information is handled according to the organization's legal, privacy, and security requirements.

Check: Analytics and tracking data boundaries Evidence required: A tag inventory, form-field map, URL-parameter review, consent configuration, data-flow diagram, and a record of which systems can receive health-related or identifying information.

Google Analytics 4 (GA4) should be reviewed as part of the stack rather than assumed safe by default. Pass condition: The responsible privacy and technical owners can explain what data is collected, where it is sent, why it is needed, and which controls prevent prohibited or unintended disclosure.

Severity: critical Owner: Privacy or compliance owner with analytics engineering Corrective action: Remove unnecessary collection, redact sensitive parameters, restrict destinations, and redesign tracking where the current implementation cannot be justified.

Validation step: Submit test journeys with non-sensitive test data, inspect network requests and analytics payloads, and obtain the appropriate internal sign-off.

Check: Machine-readable organization information Evidence required: A comparison between visible facility information and any JSON-LD describing the organization, services, locations, or clinicians. Pass condition: Structured data matches what users can see and does not invent accreditations, services, locations, professionals, or claims.

Severity: medium Owner: Technical SEO with content governance Corrective action: Remove unsupported properties, correct entity relationships, and keep markup synchronized with the visible page. Validation step: Re-test the deployed markup and manually compare every material property with the page and operational records.

Check: Mobile performance on high-intent entry pages Evidence required: Field or repeatable lab measurements for core service, admissions, and insurance-verification pages, including the page element responsible for Largest Contentful Paint.

Pass condition: Pages remain usable on representative mobile connections and the measured LCP is not above 2.5 seconds in the chosen test condition; treat the threshold as a technical target, not a promise of lower bounce rates or higher rankings.

Severity: high Owner: Web engineering Corrective action: Reduce render-blocking work, optimize media, simplify templates, and prioritize the content required for the initial viewport. Validation step: Re-run the same tests after deployment and confirm that forms, navigation, and tracking still work.

Check: HTTPS and certificate integrity Evidence required: A crawl showing protocol use, redirect behavior, mixed-content errors, certificate validity, and security warnings on important templates. Pass condition: Important pages load over HTTPS without mixed-content warnings or broken certificate chains.

Severity: critical Owner: Infrastructure or web engineering Corrective action: Renew or replace invalid certificates, remove insecure resource calls, and normalize internal links and redirects. Validation step: Re-crawl the production site and manually test representative intake paths in modern browsers.

Check: Program URL organization Evidence required: A crawl and content map showing how levels of care and related program information are grouped. Existing routes such as medical detox and long-term residential care should be retained only when they represent real, useful pages.

Pass condition: Important program pages have stable, descriptive URLs, are reachable through navigation or contextual links, and do not rely on duplicate or orphaned variants. Severity: high Owner: Technical SEO with content architecture Corrective action: Consolidate duplicates, repair internal links, and align URL structure with the actual information architecture without forcing a cosmetic hierarchy.

Validation step: Re-crawl the revised structure and verify indexability, canonical handling, internal links, and user navigation.

Long-term rehab content should help patients and families understand real services while making responsibility for health-related statements visible and maintainable.

Check: Program-page completeness Evidence required: A page-by-page inventory covering program purpose, eligibility or fit questions, what the center can and cannot provide, admissions logistics, staffing or clinical oversight where appropriate, and source support for material medical claims.

A source guideline previously called for 1,200 words, but length alone is not a quality standard. Pass condition: Each page answers the important decision questions for the actual program without padding, unsupported outcomes, or copied descriptions.

Severity: high Owner: Clinical content owner with admissions input Corrective action: Replace generic copy with accurate program-specific information, remove unsupported claims, and add missing decision-useful details.

Validation step: Have the assigned reviewer compare the final page against current operational and clinical information before publication.

Check: Clinical review governance Evidence required: A written policy identifying which content requires professional review, who can approve it, how reviewer credentials are verified, and when material must be rechecked.

Pass condition: Pages requiring review have a traceable reviewer and update record; pages that do not require clinical review are not given misleading medical-review labels. Severity: critical Owner: Clinical leadership Corrective action: Assign qualified reviewers, create an approval log, and remove or correct content whose review history cannot be established.

Validation step: Sample published clinical pages and confirm that the named reviewer, credentials, review scope, and latest approved version are verifiable.

Check: Search intent across the decision journey Evidence required: Query data, intake-call themes, site search, and content mapping for early education, program comparison, admissions preparation, insurance questions, and family concerns.

Pass condition: The site covers meaningful patient and family questions without fabricating separate pages for trivial keyword variants. Severity: high Owner: Content strategy with admissions Corrective action: Consolidate overlapping pages, fill decision-critical gaps, and connect educational material to relevant program information with descriptive internal links.

Validation step: Review Search Console and intake data to confirm that the intended page is appearing for relevant queries and that users can reach the next useful step.

Check: Long-tail and local intent accuracy Evidence required: A keyword map tied to services actually offered and locations actually operated. Pass condition: Terms such as long-term care near the searcher are represented only where the page can truthfully answer the query, and location pages exist only for genuine facilities with useful location-specific information.

Severity: high Owner: SEO lead with operations verification Corrective action: Remove misleading location claims, merge thin geo pages, and strengthen real location pages with practical facility information.

Validation step: Compare page claims with operational records and manually inspect search-result snippets for misleading geographic language.

Check: Content maintenance and pruning Evidence required: An archive inventory with traffic, links, indexation, medical relevance, duplication, freshness, and ownership. The source referenced 2026 as a review standard, but the real test is whether the content is current and supportable now.

Pass condition: Outdated or low-value content is updated, consolidated, redirected when appropriate, or removed with a documented reason. Severity: medium Owner: Content governance Corrective action: Prioritize pages with inaccurate clinical information, cannibalization, or no identifiable purpose before cosmetic rewrites.

Validation step: Re-crawl after changes, confirm redirects and canonicals, and verify that retained pages have current owners.

Local search work should make genuine facilities easier to verify without fabricating locations, overclaiming services, or treating profile activity as a guaranteed ranking factor.

Check: Facility verification and business information Evidence required: Operational records for each physical campus, matching address and phone information, current hours, and a review of the Google Business Profile category and service representation.

Pass condition: Every claimed profile corresponds to a real eligible location and accurately reflects the facility that users can contact or visit. Severity: critical Owner: Operations with local search owner Corrective action: Correct conflicting information, remove unsupported location claims, and resolve duplicates or ownership issues through the platform's documented processes.

Validation step: Compare the live profile, website, major directories, and internal facility records after changes propagate.

Check: Crisis and admissions language Evidence required: A documented list of services and admissions capabilities, including whether statements such as 24/7 admissions are operationally true and approved for public use.

Pass condition: Profile and site language describes real availability without creating an emergency-service implication the center cannot support. Severity: critical Owner: Admissions leadership with compliance review Corrective action: Replace unsupported urgency claims with accurate contact and availability language.

Validation step: Call the published numbers, test the stated hours, and verify that staff handling inquiries can deliver what the public listing says.

Check: Review collection and responses Evidence required: The written review-request workflow, eligibility rules, incentives policy, response templates, and privacy guidance. Pass condition: Eligible patients or families are asked consistently for honest feedback without incentives, negative-review suppression, or selection of only satisfied people; responses do not reveal protected or sensitive information.

Severity: high Owner: Reputation owner with privacy review Corrective action: Remove gating, eliminate incentives where inappropriate, standardize neutral requests, and route sensitive responses for review. Validation step: Sample recent requests and public replies to confirm the documented process is being followed.

Check: Name, address, and phone consistency Evidence required: A citation inventory across relevant healthcare, local, and general directories plus the website and business profiles. Pass condition: Core facility identifiers are accurate and materially consistent, while legitimate formatting differences are not mistaken for errors.

Severity: medium Owner: Local search owner Corrective action: Update material conflicts, close obsolete listings where possible, and maintain a source-of-truth record for each facility. Validation step: Re-check priority citations after updates and confirm users are not being sent to closed or incorrect locations.

Check: Profile update practices Evidence required: A content calendar or change log showing why profile updates are published and who verifies the factual claims. Pass condition: Posts or updates are used when there is genuinely useful facility information to communicate, not because a weekly cadence is assumed to be an official ranking factor.

Severity: low Owner: Local marketing with operations review Corrective action: Stop low-value posting schedules and publish only accurate operational, educational, or community information that serves users. Validation step: Review a sample of recent posts for accuracy, relevance, and consistency with the website.

Authority work should be evaluated by legitimacy, relevance, evidence, and editorial value rather than by a promised link count or assumed ranking impact.

Check: Accreditation and professional listings Evidence required: Current accreditation or membership records and any public listing that the issuing organization actually provides. Pass condition: The website references only valid, current credentials, and any external link exists because the external organization independently publishes it.

Severity: critical Owner: Compliance or credentialing owner with SEO support Corrective action: Remove expired or misleading badges and correct the public credential record before requesting any listing change.

Validation step: Verify each credential directly with the issuing organization and confirm that the website representation matches the verified status.

Check: Data-led public content Evidence required: A documented dataset, methodology, responsible analyst, limitations, and approval process for any report based on internal treatment or community data.

Pass condition: Published statistics can be traced to a defined source and do not expose sensitive information or overstate treatment outcomes. Severity: high Owner: Data owner with clinical, privacy, and communications review Corrective action: Withdraw unsupported statistics, document methodology, and publish limitations alongside any retained findings.

Validation step: Reproduce the reported figures from the approved dataset and confirm the publication passed the required privacy and clinical reviews.

Check: Expert contributions and guest content Evidence required: A list of contributions, authors, host publications, editorial terms, disclosure requirements, and the source material supporting clinical claims.

Pass condition: Contributions are genuinely authored or substantively reviewed by the named expert and are not purchased primarily to manipulate search rankings. Severity: medium Owner: Communications lead with clinical reviewer Corrective action: End low-quality placement schemes and focus outreach on legitimate editorial opportunities where the expert can add useful information.

Validation step: Manually inspect published contributions for accurate attribution, disclosure, link destination, and consistency with approved claims.

Check: Unlinked brand mentions Evidence required: A monitored list of legitimate mentions and the context in which the organization was referenced, including alerts from tools such as Brand24 where used.

Pass condition: Outreach asks for corrections or useful citation links only when editorially appropriate and does not pressure publishers to alter independent coverage. Severity: low Owner: Digital PR or communications Corrective action: Prioritize inaccurate mentions and genuinely useful citation opportunities rather than mass link reclamation.

Validation step: Record the final publisher response and confirm any resulting link points to the most relevant, accurate page.

Conversion work should reduce avoidable friction while preserving informed choice, privacy, accessibility, and accurate expectations about the admissions process.

Check: Insurance-verification form scope Evidence required: A field-by-field inventory, purpose for each requested item, privacy disclosure, data destination, access controls, mobile tests, and handoff process to admissions.

Pass condition: The form requests only information the organization can justify, clearly explains what happens next, and handles sensitive information through an approved workflow. Severity: critical Owner: Admissions operations with privacy and engineering Corrective action: Remove unnecessary fields, fix ambiguous validation, strengthen secure handling, and separate marketing tracking from sensitive submissions where required.

Validation step: Complete the form on representative devices using test data and confirm receipt, routing, access control, and analytics behavior.

Check: Mobile calling access Evidence required: Mobile-page tests across important service and admissions pages, including visibility of the correct phone number and whether taps initiate the intended call action.

Pass condition: Users can find and call the appropriate admissions contact without obscuring content or triggering misleading urgency language. Severity: high Owner: Web product owner with admissions Corrective action: Repair phone links, simplify mobile navigation, and use persistent call controls only when they improve access without blocking content.

Validation step: Test the full call path on common mobile browsers and confirm attribution does not interfere with the displayed contact information.

Check: Credentials and trust information Evidence required: Current verification for any accreditation, certification, or membership shown in the footer or elsewhere. Pass condition: Badges and claims are current, clickable where appropriate, and worded accurately; they are not described as guarantees of safety, outcomes, compliance, or search performance.

Severity: high Owner: Credentialing or compliance owner Corrective action: Remove expired, unverifiable, or misleading marks and replace them with accurate explanatory text when necessary. Validation step: Verify every displayed credential against the issuing organization's current record.

Check: Facility orientation content Evidence required: Current photos or video, filming consent where relevant, captions or transcripts, and operational review of statements about rooms, staff, amenities, rules, and admissions.

Pass condition: Orientation content accurately represents what prospective patients and families can expect and does not promise outcomes or experiences that vary by individual. Severity: medium Owner: Admissions and communications with operations review Corrective action: Replace outdated visuals, add accessible alternatives, and correct any mismatch between the media and current facility operations.

Validation step: Have operations and admissions review the final published media against the current facility experience.

Repair broken internal links that block access to admissions information - High - 2 hours

Verify that the Google Business Profile uses current facility photos and accurate operational details - Medium - 1 hour

Add clear reviewer attribution to the top 5 traffic-driving clinical posts where professional review is actually required, then validate the markup and visible byline - High - 3 hours

• Using generic imagery or vague facility copy without checking whether families can verify the real environment, staff roles, and program information they need.
• Leaving levels of care and related clinical topics disconnected, making it difficult for users and crawlers to understand how the center's information fits together.
• Running analytics or advertising scripts without a documented review of sensitive-data exposure, then describing privacy controls as an SEO ranking tactic instead of a separate legal and technical responsibility.
• Creating pages around high-volume addiction terms or nominal cities without proving that the center offers the relevant program or operates a genuine location with useful location-specific information.