This article is for hospital CMOs, clinic owners and marketing leads who have just signed with a healthcare SEO agency, or are about to. It sets out what a sensible first 90 days looks like, what you should be able to see at day 30, 60 and 90, and which results are too early to demand.
It is not a guide to SEO itself; our definitive healthcare SEO guide covers the discipline. This is a client-side guide to the engagement: what you owe the agency, what they owe you, and how to tell a working start from a slow one.
One caution first. Nobody can promise a ranking in 90 days, and Google says so plainly in its guidance on hiring an SEO: "No one can guarantee a #1 ranking on Google." Treat any plan that does as a warning.
Why 90 days is a start, not a verdict
Search does not move on a timetable. Google's Search Status Dashboard lists core updates in March, June and December 2025 and in March and May 2026, plus several spam updates in the same period. A healthcare site can see rankings move because of an update during an engagement, in either direction, regardless of what the agency has done that month.
So judge the first 90 days on three things you can verify: whether the foundations were set up, whether the agency fixed what it found, and whether it publishes things you can inspect. Rankings and enquiries are lagging indicators. Our answer on how long healthcare SEO takes goes into the reasons.
A final framing point. The first 90 days of an agency engagement and the first 90 days of a campaign are not the same thing. The agency can finish its onboarding in six weeks. The site may take months to show the effect of what was done. Keep those two clocks separate in your head, and ask the agency to report on both.
Days 1 to 14: access, baseline and a written plan
The first two weeks should produce no visible change on your website. They should produce evidence.
Access and measurement. The agency should ask for, or help you set up:
- Google Search Console, verified at domain level. Google advises granting an outside party only read access during an audit; give full access only when the work needs it.
- GA4, with the key actions defined as events: appointment form submissions, click-to-call, WhatsApp clicks and booking-widget completions.
- Google Business Profile access for every location, as a manager, not by sharing a personal login.
- Call tracking, so phone enquiries can be tied to a source.
- Your CMS, hosting and tag manager, with a named technical contact on your side.
A baseline. Before anything changes, record impressions, clicks and average position by page group (home, department, doctor, condition, location) from Search Console; indexed page count; the main enquiry volumes by channel; and a manual set of target queries with the results as they appear today. Without this, nobody can later say what moved.
A written plan. A short document that states the target specialties and locations, the five to ten priority pages, the agreed measures and the reporting rhythm. It should say what the agency will not do, for example buy links or publish unreviewed medical content.
Our SEO audit for healthcare is one example of what a baseline audit covers.
Days 15 to 30: the audit and a ranked fix list
By day 30 you should hold a written audit with findings ranked by impact and effort, not a 90-page export of tool warnings. A useful audit covers:
- Crawl and indexation. Which pages are indexed, which are blocked, duplicated or redirected, and whether important department and doctor pages can be found by crawling.
- Technical health. Speed and mobile usability on the page types patients actually use, broken internal links, canonical tags, structured data errors.
- Site architecture. Whether each specialty, procedure and location has a page with a clear purpose, or whether several pages compete for the same query.
- Content and E-E-A-T. Whether clinical pages name a medical reviewer, show qualifications and registration, and carry review dates.
- Local presence. Google Business Profile accuracy, category choices, duplicate listings, and name, address and phone consistency across directories.
- Compliance. Content that breaches the NMC's October 2026 advertising rules, such as testimonials, before-and-after images or superlatives. Our NMC summary lists them, and for a hospital with Gulf operations the same check applies under local rules, as we cover in the guides on Saudi Arabia and Arabic keyword research.
Google's own Search Console performance report documentation defines the metrics your baseline will use: clicks, impressions, click-through rate and average position. Ask the agency to confirm which date ranges and filters it is using, because a report built on a different filter from yours will never reconcile with your own login.
The test of the audit: could a developer start work on item one tomorrow? Each finding should name the URL pattern, the problem, the fix and the expected effect, in plain terms.
Days 31 to 60: fixes first, then pages
Month two is where visible work begins, and the order matters.
Technical and structural fixes ship first. Redirect chains, noindex mistakes, duplicate pages, schema errors and slow templates are cheaper to fix than to write around. Ask for a change log with dates, so you can match any movement in Search Console to a specific change.
Local fixes follow. Correct profile categories, hours, services and attributes; merge or remove duplicates; align directory listings. The Google Business Profile service covers the details.
Then the first priority pages. Choose a small number, for example two service-line pages and the doctor profiles in one department. Each needs a clear owner on your side, a clinical reviewer, and a publish date. Resist the pressure to publish thirty thin articles. Google's helpful-content guidance rewards pages written to answer a visitor's question, and a clinician must approve the medical content.
Content briefs are shared before drafting. For each priority page, the agency should send a one-page brief: the query set, the patient question, the intended reader, the sources to be cited, and the clinician who will review. Read it as you would read a design brief. If the brief is vague, the page will be too. Google's guidance on creating helpful, reliable, people-first content is a fair standard to hold both sides to.
Reporting begins. By day 45 you should see a first report that shows the baseline, what changed, and what was learned. It should not contain "rankings improved" without naming the queries and the dates.
