Gmail publishes the number. If more than 0.30% of the people who receive your email mark it as spam, Gmail decides your mail is a problem and starts treating it that way. Yahoo publishes the same ceiling. Neither of them adjusts it because you are a dermatology group rather than a shoe company.
That is the part healthcare marketers tend to miss. The rules were not written for you, they are not softened for you, and the fact that every address on your list belongs to a real patient who has physically been inside your building earns you nothing at the inbox.
Google and Yahoo aligned their bulk sender rules in 2024, and Microsoft followed for Outlook.com in 2025. If you send to consumer inboxes in the United States, those three companies decide most of what happens to your mail.
Google's requirements apply to anyone sending more than 5,000 messages a day to Gmail accounts. You need SPF and DKIM on your sending domain, a DMARC record, one click unsubscribe with a visible unsubscribe link in the message body, and a spam rate in Postmaster Tools below 0.30%. Google also recommends staying under 0.10%, which is the number worth managing to. The 0.30% figure is where consequences begin, not where they end.
Yahoo asks for the same things, holds the same 0.3% spam rate ceiling, and adds a clock. Unsubscribes get honored within two days.
Microsoft published its own requirements for high volume senders to Outlook.com, Hotmail, and Live addresses in 2025, built on the same authentication foundation.
The authentication half of this is a solved problem. Any competent sending platform configures it once and you never think about it again. The half that actually catches healthcare organizations is the spam rate, and it catches them for reasons that have nothing to do with the quality of their marketing.
A retailer's list is built from people who typed their address into a box last month to get 10% off. A practice's list is built from intake forms. Some of those addresses were copied off a clipboard at a front desk in 2019 and have not been touched since.
Both lists are permission based in the loose sense. Only one of them is current.
Then there is the send pattern. Retailers mail constantly, so their reputation is a continuously refreshed signal and their complaints are spread across enormous volume. Plenty of practices mail twice a year. When you send to twelve thousand people who have not heard from you since the last time, a meaningful share of them do not remember opting in, and the fastest way to make it stop is the spam button rather than the unsubscribe link.
This is the same failure described in the piece on reactivating a cold patient list, viewed from the other end. Reactivation problems and deliverability problems are not two problems. Mailing a stale list all at once damages both at once, and the deliverability damage is the half that follows you into every campaign after it.
Here is the one that surprises groups.
Sender reputation attaches to the domain and the IP you send from. When a practice finally leaves a general purpose tool that will not sign a BAA, which is the right call and the filter we apply in our rundown of healthcare marketing tools, the move almost always comes with a new sending setup. New platform, usually a new sending subdomain, sometimes a new IP pool.
Whatever goodwill the old configuration had accumulated does not travel with you. As far as the mailbox providers are concerned you are a brand new sender. And the first thing a newly migrated practice tends to do is the single worst available move, which is a full database reactivation blast on week one.
Treat the migration and the first campaign as one project instead of two.
Appointment reminders and recall notices go to nearly everyone and generate almost no complaints. Patients want them. Under the HIPAA Privacy Rule, communications made for the treatment of the individual, including appointment reminders and refill reminders, are not marketing at all, which is a compliance point but also a deliverability one.
That stream is the healthiest mail you send. It is engagement, in the exact form mailbox providers reward.
Most practices throw that advantage away by treating all patient email as one undifferentiated pipe, or by running reminders through the practice management system and marketing through something else entirely, so the good signal never accrues to the domain doing the harder work. Sending both from the same authenticated domain, on separate streams with separate subscription handling, is one of the few changes that improves deliverability and compliance in the same move.
PatientCampaign runs both streams from one place for exactly this reason, with the authentication and unsubscribe handling configured up front rather than discovered after a campaign underperforms. But the sequencing matters more than the vendor. Authenticate, segment by recency, warm the domain, then send.