Content

Three Companies Decide Whether Your Patients Ever See Your Email

Blog
Content

Gmail publishes the number. If more than 0.30% of the people who receive your email mark it as spam, Gmail decides your mail is a problem and starts treating it that way. Yahoo publishes the same ceiling. Neither of them adjusts it because you are a dermatology group rather than a shoe company.

That is the part healthcare marketers tend to miss. The rules were not written for you, they are not softened for you, and the fact that every address on your list belongs to a real patient who has physically been inside your building earns you nothing at the inbox.

The three gatekeepers and what they require

Google and Yahoo aligned their bulk sender rules in 2024, and Microsoft followed for Outlook.com in 2025. If you send to consumer inboxes in the United States, those three companies decide most of what happens to your mail.

Google's requirements apply to anyone sending more than 5,000 messages a day to Gmail accounts. You need SPF and DKIM on your sending domain, a DMARC record, one click unsubscribe with a visible unsubscribe link in the message body, and a spam rate in Postmaster Tools below 0.30%. Google also recommends staying under 0.10%, which is the number worth managing to. The 0.30% figure is where consequences begin, not where they end.

Yahoo asks for the same things, holds the same 0.3% spam rate ceiling, and adds a clock. Unsubscribes get honored within two days.

Microsoft published its own requirements for high volume senders to Outlook.com, Hotmail, and Live addresses in 2025, built on the same authentication foundation.

The authentication half of this is a solved problem. Any competent sending platform configures it once and you never think about it again. The half that actually catches healthcare organizations is the spam rate, and it catches them for reasons that have nothing to do with the quality of their marketing.

Healthcare lists fail in a particular way

A retailer's list is built from people who typed their address into a box last month to get 10% off. A practice's list is built from intake forms. Some of those addresses were copied off a clipboard at a front desk in 2019 and have not been touched since.

Both lists are permission based in the loose sense. Only one of them is current.

Then there is the send pattern. Retailers mail constantly, so their reputation is a continuously refreshed signal and their complaints are spread across enormous volume. Plenty of practices mail twice a year. When you send to twelve thousand people who have not heard from you since the last time, a meaningful share of them do not remember opting in, and the fastest way to make it stop is the spam button rather than the unsubscribe link.

This is the same failure described in the piece on reactivating a cold patient list, viewed from the other end. Reactivation problems and deliverability problems are not two problems. Mailing a stale list all at once damages both at once, and the deliverability damage is the half that follows you into every campaign after it.

Switching to a compliant platform resets your reputation

Here is the one that surprises groups.

Sender reputation attaches to the domain and the IP you send from. When a practice finally leaves a general purpose tool that will not sign a BAA, which is the right call and the filter we apply in our rundown of healthcare marketing tools, the move almost always comes with a new sending setup. New platform, usually a new sending subdomain, sometimes a new IP pool.

Whatever goodwill the old configuration had accumulated does not travel with you. As far as the mailbox providers are concerned you are a brand new sender. And the first thing a newly migrated practice tends to do is the single worst available move, which is a full database reactivation blast on week one.

Treat the migration and the first campaign as one project instead of two.

What to fix, roughly in order

  1. Authenticate before you send anything. SPF, DKIM, and DMARC on the sending domain. Send from a subdomain rather than the root domain that carries clinical and billing mail, so a marketing reputation problem never becomes a problem for the email your front desk depends on.
  2. Watch the number Google shows you. Postmaster Tools is free and reports the spam rate the threshold is actually measured against. Your platform's internal complaint metric is a different number and it is usually kinder.
  3. Warm up. A new domain or new platform means starting with your most recently seen patients in small volumes and growing over days. Not everyone on day one.
  4. Segment by recency every time. Patients seen in the last year behave nothing like patients last seen in 2021. Sending both groups the same message on the same morning is how a good list earns a bad reputation.
  5. Make unsubscribing easier than complaining. One click, no login required, honored inside two days. Every unsubscribe you make difficult converts into a spam complaint, and the complaint costs you far more than the lost address ever will.
  6. Clean before the send, not after. Addresses that have been sitting untouched for years include dead domains and recycled addresses. Bouncing into them is a signal you pay for.

The advantage healthcare has and mostly wastes

Appointment reminders and recall notices go to nearly everyone and generate almost no complaints. Patients want them. Under the HIPAA Privacy Rule, communications made for the treatment of the individual, including appointment reminders and refill reminders, are not marketing at all, which is a compliance point but also a deliverability one.

That stream is the healthiest mail you send. It is engagement, in the exact form mailbox providers reward.

Most practices throw that advantage away by treating all patient email as one undifferentiated pipe, or by running reminders through the practice management system and marketing through something else entirely, so the good signal never accrues to the domain doing the harder work. Sending both from the same authenticated domain, on separate streams with separate subscription handling, is one of the few changes that improves deliverability and compliance in the same move.

PatientCampaign runs both streams from one place for exactly this reason, with the authentication and unsubscribe handling configured up front rather than discovered after a campaign underperforms. But the sequencing matters more than the vendor. Authenticate, segment by recency, warm the domain, then send.