Your Google profile may be invisible to AI search. Here is what to fix this week.

AI Overviews Are Reshaping Which Therapists Get Found, and Traditional SEO Rankings No Longer Tell the Full Story

Google's AI Overviews are changing the rules of online visibility for therapy practices, and most owners have no idea it is happening. According to multiple reports, these AI-generated answer boxes now appear above traditional organic results, sometimes naming specific providers directly. As reported by various marketing sources, a practice can hold a page one ranking and still be completely skipped over by potential clients who get their answer from the AI summary without ever scrolling down.

Standard rank tracking tools do not capture this shift, meaning your visibility loss is essentially invisible in your current reports. Sources indicate that practices continuing to optimize only for traditional keywords are likely falling behind without any clear warning signs. The new priority, according to industry observers, is structured, authoritative content that AI systems can easily read, summarize, and cite when responding to search queries about therapy services in your area.

Do this now:

• Audit your website's key service pages and rewrite them using clear question-and-answer formatting that directly addresses what potential clients search for, such as "how to find a therapist" or "what to expect in a first session."
• Add or update your Google Business Profile with complete, detailed information including specialties, accepted insurance, and a keyword-rich description so AI systems have accurate structured data to pull from.
• Publish at least one authoritative FAQ page covering common therapy questions specific to your niche, using plain language that mirrors how real clients phrase their searches online.

ChatGPT and Google AI Are Answering Therapy Searches Without Mentioning Your Practice. Here Is How to Fix That.

According to reports from multiple industry sources, small service businesses, including therapy practices, are being skipped entirely by AI-generated search answers. When a prospective client asks ChatGPT or Google AI Overviews to find a therapist, the AI pulls from sources it considers authoritative and well-structured. As reported by several digital marketing observers, practices without clear, organized web content rarely appear in those answers, regardless of how long they have been in business. It is worth noting that sources do not clearly confirm whether AI tools name specific practices directly, only that they are used to search for providers.

This matters because AI search is not a future trend. It is already how a growing number of people find services today. Sources indicate that practices benefit from structured content, clear specialty descriptions, and consistent information across the web to improve visibility in generative search results. Getting this right now, before AI search becomes the dominant discovery channel, is the strategic move.

Do this now:

• Audit your website homepage to confirm it clearly states your location, specialties, and the types of clients you work with, in plain language without jargon.
• Check that your practice name, address, and phone number appear identically on your website, Google Business Profile, and any directory listings like Psychology Today.
• Add a dedicated FAQ page to your website that answers the questions prospective clients actually ask, such as what to expect in a first session and whether you accept insurance.

A 2026 GBP Maintenance Guide Reveals What Most Therapy Practices Are Getting Wrong

A detailed guide published by Rocks Digital on April 10, 2026 makes clear that claiming and verifying a Google Business Profile is only the starting point. Google's algorithm now rewards profiles that are actively maintained with fresh photos, current hours, regular posts, and responses to every review. Practices that completed their GBP setup years ago and have not updated it since are quietly losing ground to competitors who treat the profile as a living part of their marketing.

The guide's maintenance checklist maps directly to what therapy practices should be doing every month. A neglected profile sends a signal to both Google and prospective clients that your practice may not be active or engaged. Small, consistent updates over time compound into a measurable visibility advantage in local search results.

Do this now:

• Set a recurring monthly calendar reminder to add at least one new photo to your Google Business Profile, such as your waiting room, office exterior, or a team headshot.
• Respond to every existing review on your profile this week, including older ones that have not received a response yet, using a professional and warm tone.
• Publish a Google Business Profile post this week with a brief update, a seasonal mental health tip, or information about a service you offer, and commit to posting at least twice per month going forward.

170 Email Breaches Hit Healthcare in 2025. A Free Webinar Can Help Your Practice Avoid Becoming Number 171.

The HIPAA Journal announced a free webinar on email security fundamentals on April 3, 2026, prompted by a Paubox report showing 170 email-related healthcare data breaches were reported to the HHS Office for Civil Rights in 2025. Many of those breaches involved unencrypted protected health information sent through standard email clients, which is a common practice in small and solo therapy offices. The webinar covers what encryption is legally required under HIPAA, what content counts as PHI in an email, and how to identify and close gaps before an OCR audit.

For therapy practices, email is often the first place compliance breaks down. Sending appointment reminders, intake forms, or any message that references a client's condition or treatment through a standard Gmail or Outlook account without a Business Associate Agreement and encryption in place creates real legal exposure.

Do this now:

• Register for the free HIPAA Journal email security webinar at hipaajournal.com to learn exactly what encryption your practice is required to have in place.
• Review the last 30 days of emails sent from your practice account and flag any that included client names alongside appointment details, diagnoses, or treatment information.
• Verify that your email provider has signed a Business Associate Agreement with your practice, and if not, contact them this week to request one or switch to a HIPAA-compliant provider.

A Behavioral Health Provider Is Among Six New HIPAA Breaches. Here Is What Every Therapy Practice Should Check Today.

According to the HIPAA Journal, as reported on March 26, 2026, six new healthcare data breaches were disclosed, including one at New Horizons Behavioral Health in Georgia. Mental health organizations are not peripheral targets in healthcare cybersecurity. They are active ones. When a breach is discovered, HIPAA's Breach Notification Rule requires practices to notify affected individuals within 60 days, and to notify HHS simultaneously. Practices can face OCR investigations even when they are the victim rather than the party that made an error.

Sources indicate that if a breach affects 500 or more individuals in a state, local media notification is also required under the rule, as outlined in 45 CFR sections 164.400 through 414. Having a documented incident response plan before something happens is not optional. It is the difference between a manageable crisis and a compliance failure.

Do this now:

• Locate your practice's written incident response plan today, and if one does not exist, create a one-page document that outlines who to contact and what steps to take within the first 24 hours of a suspected breach.
• Review the HIPAA Breach Notification Rule's 60-day notification requirement at hhs.gov and confirm your practice has a process to meet that deadline.
• Schedule a 30-minute review with your practice manager or privacy officer this month to walk through your breach response procedures and identify any gaps.

Quick wins for the week

• Search your practice name on ChatGPT and Google AI Overview to see whether you appear in results when someone asks for a therapist in your city
• Log into your Google Business Profile this week and update your hours, add a recent photo, and confirm your services list is complete and accurate
• Ask your email or EHR vendor to confirm in writing that your current setup meets HIPAA encryption standards for messages containing patient information
• Add a short paragraph to your website About page describing your specialty, location, and ideal client so AI tools have clear text to pull from when generating answers

Final thoughts

This week's stories share a common thread: the systems that used to be good enough no longer are. A Google Business Profile that worked in 2022 may be losing ground today. A website that ranked well before AI search became mainstream may now be invisible to ChatGPT and Google AI Overviews. An email workflow that felt fine for years may be one unencrypted message away from an HHS investigation. None of this means you have done something wrong. It means the landscape has shifted, and catching up requires attention that most therapists simply do not have bandwidth for.

While you're providing therapy, we're monitoring policy changes, protecting your Google presence, and optimizing for AI search. You shouldn't need to become an SEO expert, compliance specialist, and tech strategist on top of being a therapist.