Podium
Reviews and messaging
Webchat by code snippet, continuing over text. Podium's terms apply its BAA to covered entities and business associates.
Reviews and messaging
Birdeye and your treatment center website
Review widget and website chat by embed code. Birdeye says a BAA is available and its products support HIPAA compliance.
- Read against the vendor's own pages
- BAA on request
- Checked October 15, 2026
What it is
A reputation and customer experience platform for review requests, review widgets, listings and a website chat widget.
How it connects to a website
- Embed
Birdeye's review widget and its Chatbot AI (webchat) widget are both added to the site as code snippets.
What KhanWork does with it
- Embed Birdeye's review widget where it helps a family decide, such as the admissions and program pages.
- Install the chat widget only once the BAA is in place, and check how it behaves on a phone.
- Review what Birdeye sends to Google Analytics before turning that integration on.
Setup, as the vendor documents it
- Review widget: in Birdeye, open Settings, then Reviews, then Promote on Website (multi-location accounts go through Business info and the location). Pick the widget type, configure it, then copy the code into the site.
- Chat widget: open Settings, Inbox, Chatbot AI, and on the Install tab choose Copy Code.
- Paste the chat code right after the opening body tag or right before the closing body tag, publish, and refresh to check it.
Source: Birdeye support center. Menus and labels change; follow what you see in your account.
What to watch out for
Where patient details can slip out with Birdeye, and what the vendor's own documents say to switch on, switch off or ask for.
Chat collects what people type
A family in a hard moment can type details into a chat box they would not put in a form. Get the BAA in place before the chat widget goes live.
Check what reaches Google Analytics
Birdeye's guide sends chat events such as Open and Send to Google Analytics. It does not say whether message text or contact details are included, so verify in Google Analytics before you rely on it. Google offers no BAA for Analytics.
Review requests use patient contact details
Sending review requests means giving Birdeye patient names, phone numbers or emails. That is another reason the BAA comes first.
Replies are public
A reply to a review can confirm that someone was a patient. Keep replies general, whoever writes them.
Frequently asked questions
Birdeye's security page says a Business Associate Agreement is available and that its products support HIPAA compliance for healthcare brands.
Birdeye generates the widget code under its review settings. We place it on the pages where reviews help a family decide.
Only with the BAA in place and a plan for who answers. Chat can gather more sensitive detail than a short form.
Sources
- Birdeye, Security (opens in a new tab) (checked )
- Birdeye, Healthcare (opens in a new tab) (checked )
- Birdeye support, embed the Chatbot AI widget (opens in a new tab) (checked )
- Birdeye support, embed the Birdeye widget (opens in a new tab) (checked )
- Birdeye support, Google Analytics with Chatbot AI (opens in a new tab) (checked )
- Birdeye Developer Portal (opens in a new tab) (checked )
Not legal advice. This page reports what the vendor publishes. Nothing here implies a partnership with Birdeye. Confirm plans and the BAA in writing with the vendor, and let your compliance lead or counsel decide what counts as PHI in your workflows. For the terms, see BAA, PHI, HIPAA and 42 CFR Part 2 in the glossary.
