What 625 physiotherapy websites teach us about technical SEO and local search

We asked a simple question and turned it into an experiment. If we audit an entire local-SEO sector —Spain's physiotherapy clinics— and measure its technical health variable by variable, what separates those who top the results page from those who barely show up?

The short answer is uncomfortable: in physiotherapy local SEO almost nobody does the technical part well, and that is precisely where the opportunity lies.

The long answer is this article. We audited 625 real websites already competing for their local market and found a sector that has solved the basics (almost all have HTTPS and a sitemap) but has abandoned what truly differentiates: the right structured data, server security and —the most surprising finding for a business that lives off its calendar— the ability to book an appointment online. What we found challenges a few myths and confirms a truth the industry repeats but few apply: in local SEO, a solid technical foundation is not an "extra". It is the floor everything else stands on.

How we read the data (and why it matters)

Before the conclusions, a piece of honesty rarely seen in SEO studies. Our sample has a selection bias: these are sites that already rank in the Top 20 of their local query. We are not comparing winners against the rest of the universe, but survivors against survivors.

This has two implications that run through the whole article.

First: correlations with position will be weaker than you might expect. Not because the technical part doesn't matter, but because the true effect of technical SEO shows when you compare those who appear against those who never appear, and the latter are not in the sample.

Second: when a variable does show an advantage despite that bias, the signal is strong. Spoiler: one achieves it clearly, and another reveals a business gap so large that almost nobody in the sector is exploiting it.

With that in mind, let's get to the questions.

1. Which CMS dominates the sector? WordPress, and not by a little

Of the 625 domains analysed, 66.7% run on WordPress (417 sites). It is followed by 25.6% of custom or unidentified solutions (160 sites) and, far behind, Wix (15), Drupal (9), Joomla (4) and isolated cases of Webflow, Squarespace, Next.js, Framer and Jimdo. Within WordPress, the recurring visual builders are Elementor (21 detections) and Divi (8).

This is no surprise. Globally, WordPress powers around 43% of the entire web and roughly 61% of sites built on a CMS, more than all its competitors combined (W3Techs / Automattic). In this local healthcare niche the concentration is similar.

Why does it matter for technical SEO? Because the ceiling and the floor of the sector are set by the WordPress ecosystem: the same templates, the same SEO plugins, the same default decisions. If the template generates mediocre structured data or leaves security headers unconfigured —and we'll see that is exactly what happens— that flaw is multiplied across the whole sector. The good news is symmetrical: careful technical configuration in WordPress is perfectly achievable and lets you stand out without reinventing anything.

A maintenance note: although most installations report recent WordPress versions, we detected a long tail of old installs —including the 5.x branch and even 4.x— on clinics that do rank. Ranking with an outdated WordPress is possible; running a healthcare clinic on an unpatched core is another story.

2. Online appointment booking: the sector's golden gap

If you take only one figure from this article, make it this one. Physiotherapy is a business of the calendar: the result of all your SEO is that someone with back pain books a session. And yet, only 7.4% of sites offer online appointment booking (46 of 625). More than nine out of ten clinics that appear on the first page of Google force the patient to phone during opening hours.

The full conversion numbers paint the whole problem:

• `tel:` link (click-to-call): 60.6% of sites.
• WhatsApp: 32.0%.
• Online booking: 7.4%.
• Instagram: 63.7% — the best-covered signal, logical in a visual sector, but Instagram books no appointments and is not local SEO.
• And most revealing: *30.4% of sites offer neither `tel:`, nor WhatsApp, nor online booking.* Almost a third of the sector appears on Google with not a single immediate contact channel on its home page.

Why is this so serious? Because patient behaviour data points in the opposite direction to the sector. According to compiled healthcare statistics, 67% of patients prefer to book online versus only 22% who choose the phone, and 34% of appointments are booked outside working hours —exactly when a clinic cannot answer the call— (Signpost / SolutionReach). More still: over half of millennials and Gen X say they would switch providers if they couldn't book online. The sector's supply (7.4%) and patient demand (67%) live on two different planets.

And here is a direct link to ranking that almost nobody makes: in the 2026 Local Search Ranking Factors report, "business is open at the time of search" entered the top five most influential Local Pack factors for the first time (BrightLocal). Online booking and well-declared hours (in the Google Business Profile and in OpeningHoursSpecification schema) don't just convert better: they feed a signal Google already uses to decide who to show.

This is not directly an on-page ranking factor, but it is a business factor that technical SEO enables. Every visit that arrives from a high-intent local search ("physiotherapy clinic in…") and hits a phone that only answers 9 to 2 is a lost conversion. In a sector where the patient compares three or four clinics before deciding, the one that lets you book at 11 pm from your phone wins the appointment.

The recommendation is the most profitable in the whole article: add online appointment booking (a calendar widget, an integration with your management software or, at minimum, a direct WhatsApp link with hours). Doing so puts you, today, ahead of 92.6% of your competitors on the one thing that truly matters: turning the visit into a patient.

3. Do sites with structured data rank better? Only if it's the right kind

Here is the central finding in SEO terms, and it has two layers.

Layer 1: having "some" schema helps, but little. The 451 sites with structured data rank, on average, at position 10.0, versus 11.5 for the 174 that have none. There is a difference, but a modest one. And it's consistent with what Google has said for years: structured data is not a direct ranking factor. What it does is enable rich results and help search engines understand the content (Google Search Central; Search Engine Journal).

*Layer 2: the type of schema changes everything. When we isolate the 145 sites that specifically implement `LocalBusiness`* (or its healthcare subtypes MedicalClinic, MedicalBusiness, Physiotherapy), the picture sharpens:

• Better average position: 9.73 versus 10.62 for the rest (median 8.0 versus 10.5 — a gap of two and a half places in the median).
• And, as a bonus, less security debt: 3.98 missing headers out of 5 versus 4.45 in the rest. They are, quite simply, sites more carefully built in every respect.
• Among Top 3 sites, LocalBusiness presence is 28.7%, versus 22.3% in those ranking from position 4 onward.

That this advantage appears despite the selection bias is exactly what makes it credible. It's not that the markup "pushes" the ranking by magic. It's that LocalBusiness tells Google precisely what you are and where you operate. Google's own documentation confirms it: with Local Business structured data you tell Google your hours, departments and reviews, and you can enable a prominent knowledge panel and appearance in business carousels; it also recommends using the most specific `LocalBusiness` subtype possible (Google Search Central, Local Business structured data).

The sector's reference literature backs it up. In the 2026 Local Search Ranking Factors report, on-page signals weigh around 15% of the Local Pack —and rise to 24% in AI-search visibility—, just behind the Google Business Profile (32%) and reviews (20%) (BrightLocal; Whitespark, Local Search Ranking Factors; Moz, Local Search Ranking Factors). Within that on-page block, correct markup of the local entity is one of the few things under your absolute control.

The lesson is not whether you mark up, but what you mark up. A well-built LocalBusiness —with consistent NAP, hours, geo-coordinates and sameAs— is worth more than ten generic schema types inherited from the template. And remember what Google keeps repeating: structured data enables search features, it doesn't guarantee a position (Google Search Central, Intro to Structured Data).

4. Does more schema types equal better position? No. And medical schema hides a paradox

If markup quality matters, does quantity matter? We measured it directly. The correlation between the number of schema types and position is essentially zero (−0.07). Grouping sites by markup volume, the average position barely moves in any coherent way: 11.5 with zero types, 10.6 with one or two, 10.8 with three or four and 9.9 with five or more. The slope exists, but it's flat and noisy.

In other words: a site with 12 schema types does not rank better than one with 3 well-chosen ones. Accumulating generic markup (WebPage, ReadAction, ImageObject, WPHeader, BreadcrumbList…) without it conveying a relevant entity for the user is noise, not signal. In fact, 32.3% of sites drag exactly this pattern: the schema block the SEO plugin injects by default (with its inevitable ReadAction) but without a single `LocalBusiness`. They have the shape of markup without its substance.

And here a healthcare paradox appears. You'd expect leading clinics to use specific medical schema (MedicalClinic, Physiotherapy, MedicalWebPage). The opposite happens: only 11.2% of the sector implements any medical schema, and its presence is lower in the Top 3 than in the rest. Does that mean medical schema hurts? No. It means that, today, the niche's leaders win for other reasons and almost nobody has yet reached the level of correctly marking up their healthcare specialty. It's an untapped lever.

The recommendation writes itself: fewer types, better chosen. For a physiotherapy clinic, the core is MedicalClinic or Physiotherapy (as a subtype of LocalBusiness/MedicalBusiness), plus BreadcrumbList and, where relevant, FAQPage or Service for specific treatments. Everything else, out, if it doesn't convey a real entity.

5. Do security headers affect ranking? Not directly, but the figure is alarming

The state of HTTP security headers in the sector is, simply, bad:

• 430 of 625 sites (68.8%) are missing all five evaluated security headers: HSTS, CSP, X-Frame-Options, X-Content-Type-Options and Referrer-Policy.
• Only 10 sites in total (1.6%) have the full set.
• The average is 4.34 missing headers out of 5.
• The most forgotten is Referrer-Policy (missing on 581 sites), followed by X-Frame-Options (565) and CSP (545).

Impact on position? Practically nil in our sample (correlation −0.02 with position). And it's consistent with the documented reality: security headers are not a direct ranking factor, something Google has confirmed explicitly (Search Engine Journal). What is a ranking signal since 2014 is HTTPS, though Google itself described it as a lightweight signal, affecting fewer than 1% of queries and weighing less than quality content (Google Search Central, HTTPS as a ranking signal). Today HTTPS is part of the Page Experience signal set alongside Core Web Vitals and mobile usability (Google Search Central, Understanding Page Experience). And here the sector passes comfortably: 604 of 625 sites use HTTPS (96.6%).

So why dedicate a whole point to it? For two reasons. First: technical SEO doesn't end at position. Headers protect your users against clickjacking, MIME-type sniffing and referrer leakage. Second, specific to physiotherapy: you are handling health data. A clinic that collects reasons for consultation, injuries or contact details through its website handles sensitive information under the GDPR. The total absence of security headers won't drop you in Google, but it betrays the kind of neglect that, in a healthcare business, does end up costing. It's no coincidence that sites with impeccable LocalBusiness have, on average, fewer missing headers: security won't raise your position, but its abandonment is the fingerprint of a site neglected in everything else.

6. Indexability: the sector's plumbing (and one detail that does worry)

robots.txt and sitemap.xml are the discovery infrastructure. Here the sector passes: 88.2% have `robots.txt`, 84.6% have `sitemap.xml` and 75% declare the sitemap inside the robots. Sites without these files do not rank worse (10.0 on average versus 10.5), but there's a catch: almost all are minimal sites with nothing else —only 10.8% of those without robots have structured data—. It's not that doing without the sitemap helps; it's that they coincide with simple sites that rank for other reasons.

It's worth recalling what these files are and are not. robots.txt manages crawling, not indexing: it mainly serves to avoid overloading the server, not to hide pages (that's what noindex is for), and a blocked URL can still appear if it receives links (Google Search Central, Robots.txt Introduction). The sitemap is a signal of discovery and priority: in Google's own words, submitting a sitemap "is merely a hint: it doesn't guarantee Google will download it or use it for crawling", and it does not affect the ranking of your pages (Google Search Central, Build and Submit a Sitemap). Neither is a direct ranking factor: they are infrastructure. Good plumbing doesn't make a house luxurious, but bad plumbing ruins it —a misplaced Disallow can wipe you off the map (Google, robots.txt specification).

The detail that does worry we found in the server response code. 20 sites returned a 403, 429 or 500 status when visited in an automated way. A server blocking or rate-limiting automated requests can be legitimate protection against malicious bots, but it can also hamper legitimate crawlers —Googlebot included— and the new AI-based discovery layers. If your site responds with a 403 to something not clearly abusive, it deserves a review: being in the SERP today doesn't guarantee you'll still be crawlable tomorrow.

The story the six headlines don't tell: the most local sector barely whispers "I'm local"

If you put all of the above together, a pattern emerges that no single question tells on its own: the most local sector that exists barely identifies itself as local to the machines.

• The semantic
  tag —the standard way to declare a physical address in HTML— appears on only 26 of the 625 sites (4.2%). In a sector whose asset is being in a physical place, this is almost a joke.
• The embedded map is present on 49%, the tel: link on 60.6% and LocalBusiness schema on barely 23.2%.
• And the complete combination —tel: + map + LocalBusiness schema, the minimum setup of a well-built local site— is met by only 14.1% of clinics.

This is, deep down, great news for anyone wanting to compete. Physiotherapy local SEO is not won today with heavy artillery, but with fundamentals almost nobody is tending. Marking up your address, your LocalBusiness, your phone and your map well puts you, today, ahead of the vast majority of your competitors.

Why this will matter more and more

Our sample's selection bias hides a time bomb for the sector. Today, in a niche with low technical competition, "being online with WordPress and a sitemap" is enough to show up in the SERP. But the bar is rising, and in physiotherapy two forces push it especially fast.

The first is AI search. Answer engines and rich search consume structured data and citations to build their responses: in the 2026 report, on-page signals (24%) and citations move to the top of AI-search visibility factors (BrightLocal). Without a clean LocalBusiness/MedicalClinic, your clinic is invisible to that new discovery layer, just when the patient asks "physiotherapist near me open now" to an assistant instead of typing it into a search box.

The second is healthcare E-E-A-T. Physiotherapy is YMYL content ("Your Money or Your Life"): Google gives "even more weight" to reliability signals on health, financial or safety topics, and values experience, expertise, authoritativeness and trust —the framework that in 2022 added a second "E" for Experience— (Google Search Central, Creating Helpful, People-First Content; Google Search Central Blog, E-A-T gets an extra E). Google has been tuning its health results for years precisely to prioritise reliable and authoritative sources (Google Search Central Blog, For more reliable health search). A visible licensed professional, verifiable clinic details, correct medical schema and a technically impeccable site are not ornaments: they are the signals Google uses to decide who to show when health is at stake.

The technical foundation is an investment that compounds. It won't give you a spectacular jump on day one, but it makes everything else —content, reviews, clinical authority— perform better and withstand each algorithm update.

Recommendations for the sector

If you run, build or position physiotherapy clinic websites —or any local healthcare business—, this is the order of priorities the data points to:

1. Add online appointment booking now. It's the most profitable business lever and the one that sets you apart most: only 7.4% of the sector has it. A calendar, an integration with your management software or, at minimum, a WhatsApp with a clear response.
2. Implement `MedicalClinic`/`Physiotherapy` well, not lots of schema badly. It's the only on-page lever with a real advantage in the sample (average position 9.73 versus 10.62). Consistent NAP, hours, geo-coordinates, sameAs and the correct healthcare subtype. Delete the useless generic schema.
3. Bring back the `
   ` tag and local signals. Only 4.2% use it. A real tel: link, semantic address and embedded map. You're a local business: tell the machines in their language.
4. Treat HTTPS as non-negotiable and headers as healthcare hygiene. You almost certainly already have HTTPS; add at least HSTS, X-Content-Type-Options and Referrer-Policy. You handle health data: security here is compliance, not luxury.
5. Review indexability and response code. Confirm the sitemap is declared in the robots, that there are no accidental Disallows and that your server doesn't return 403/429 to legitimate crawlers.
6. Keep the CMS up to date. If you're on WordPress (you probably are), an updated core and plugins are the difference between a secure clinic and a data breach about to happen.
7. Measure and compare. The whole sector shares your same flaws. Audit, prioritise by impact and become the careful exception before your competition does.

Conclusion

Question by question, the data seems to say that technical SEO moves the ranking little in this sector. But that reading is a statistical trap: it moves little because almost everyone does it equally badly. The two variables that stand out —the LocalBusiness schema and online appointment booking— do so precisely because almost nobody tends them. That's the shape of technical SEO in local SEO: it's not the engine that launches you, it's the floor that holds everything else up. And in a sector where the floor is cracked, building on firm foundations is not a marginal advantage. It is the advantage.

Physiotherapists understand better than anyone a principle: the movement seen on the surface depends on a deep structure no one looks at. Their website should be treated the same way. Today, most rank despite their technique, not because of it. The clinic that decides to fix that foundation —starting by letting the patient book whenever they want and telling Google exactly what it is and where it is— won't compete on the same ground as the rest. It will play on another.

References

Official Google documentation (Search Central)

1. Google Search Central — Local Business (LocalBusiness) Structured Data (subtypes, knowledge panel, hours). https://developers.google.com/search/docs/appearance/structured-data/local-business
2. Google Search Central — Intro to How Structured Data Markup Works (schema enables features, doesn't guarantee ranking). https://developers.google.com/search/docs/appearance/structured-data/intro-structured-data
3. Google Search Central — General Structured Data Guidelines (structured data policies). https://developers.google.com/search/docs/appearance/structured-data/sd-policies
4. Google Search Central Blog — HTTPS as a ranking signal (2014; lightweight signal, <1% of queries). https://developers.google.com/search/blog/2014/08/https-as-ranking-signal
5. Google Search Central — Understanding Google Page Experience (HTTPS + Core Web Vitals + mobile). https://developers.google.com/search/docs/appearance/page-experience
6. Google Search Central — Robots.txt Introduction and Guide (crawling, not indexing). https://developers.google.com/search/docs/crawling-indexing/robots/intro
7. Google Search Central — Build and Submit a Sitemap ("the sitemap is merely a hint; it doesn't affect ranking"). https://developers.google.com/search/docs/crawling-indexing/sitemaps/build-sitemap
8. Google Crawling — How Google Interprets the robots.txt Specification. https://developers.google.com/crawling/docs/robots-txt/robots-txt-spec
9. Google Search Central — Creating Helpful, Reliable, People-First Content (E-E-A-T and YMYL). https://developers.google.com/search/docs/fundamentals/creating-helpful-content
10. Google Search Central Blog — Our latest update to the quality rater guidelines: E-A-T gets an extra E for Experience (2022). https://developers.google.com/search/blog/2022/12/google-raters-guidelines-e-e-a-t
11. Google Search Central Blog — About improving search results related to medical care and health (2017). https://developers.google.com/search/blog/2017/12/for-more-reliable-health-search
12. Google Search Central — In-Depth Guide to How Google Search Works. https://developers.google.com/search/docs/fundamentals/how-search-works

SEO industry studies and reference resources

1. BrightLocal — Google's Local Algorithm and Local Ranking Factors (Local Search Ranking Factors 2026: GBP 32%, reviews 20%, on-page 15%; "open at time of search" in top 5). https://www.brightlocal.com/learn/google-local-algorithm-and-ranking-factors/
2. Whitespark — Local Search Ranking Factors. https://whitespark.ca/local-search-ranking-factors/
3. Moz — Local Search Ranking Factors Study. https://moz.com/local-search-ranking-factors-study
4. Search Engine Journal — Google Confirms Structured Data Won't Make A Site Rank Better. https://www.searchenginejournal.com/google-confirms-that-structured-data-wont-make-a-site-rank-better/544433/
5. Search Engine Journal — Google Answers If Security Headers Offer Ranking Influence. https://www.searchenginejournal.com/security-headers-and-ranking-influence/488781/
6. W3Techs / Automattic — WordPress Market Share (global CMS share). https://wordpress.com/blog/2025/04/17/wordpress-market-share/ · https://w3techs.com/technologies/details/cm-wordpress

Online booking and patient behaviour data

1. Signpost (citing SolutionReach, Zippia and TechReport) — Online Appointment Scheduling Stats (67% prefer booking online vs. 22% by phone; 34% of appointments outside hours; switching providers). https://www.signpost.com/blog/online-appointment-scheduling-stats-2024/
2. SolutionReach — Why Some Patients Prefer an Online Scheduling Option. https://www.solutionreach.com/blog/why-some-patients-prefer-an-online-scheduling-option

Technical specification

1. Schema.org — Physiotherapy / MedicalClinic / LocalBusiness (structured data types). https://schema.org/Physiotherapy · https://schema.org/MedicalClinic · https://schema.org/LocalBusiness