Online reviews for medical practices: how to get more of them and reply without breaking HIPAA

Stringhead TeamApril 21, 20264 min read

Here’s something every practice owner knows deep down. One angry one-star review can sting more than fifty five-star ones feel good. And patients reading your reviews notice how you handle the bad ones just as much as they notice the good.

Reviews matter for two reasons. They’re often the deciding factor when a patient chooses between two practices. And on Google, they’re one of the biggest factors in who shows up on the map. So it’s worth having a real system, not just hoping patients remember.

Getting more reviews (the honest way)

Most happy patients are glad to leave a review. They just don’t think of it, or they don’t know where to go. Your job is to ask at the right time and make it easy.

Pick the right moment. For surgical practices, that’s usually a follow-up when the patient is seeing results and feeling great. For a dental or skin clinic it might be right after the visit
Ask in person first. A quick “We’d really appreciate it if you shared your experience” from the surgeon or coordinator works far better than an automated email alone
Follow up with a direct link. Send a text or email that opens straight to your Google review form. Every extra click loses people
Make it routine. Build the ask into your workflow so it happens every week, not in a burst once a year

A couple of things to avoid. Don’t offer discounts or gifts in exchange for reviews. Google doesn’t allow it and the FTC takes a dim view of it too. And don’t only ask patients you’re sure are happy (“review gating”). Ask everyone you’d reasonably ask, and let the reviews be real.

Replying to positive reviews

Reply to them. It shows prospective patients there are real people behind the practice, and it encourages more reviews.

But keep it general. A reply like “So glad your rhinoplasty recovery went smoothly, Sarah!” confirms that Sarah is a patient and what procedure she had. Even though she shared it herself, your reply is a disclosure from the practice. Under HIPAA, that’s a problem.

Something like this is safe and still warm:

“Thank you so much for taking the time to leave this review. Our whole team works hard to make every visit a great experience, and we really appreciate the kind words.”

Vary the wording a bit so it doesn’t look copied and pasted.

Replying to negative reviews

Take a breath first. Never reply the same day you’re upset.

Then keep the public reply short, calm and free of any patient details. Don’t confirm they were a patient, don’t mention their treatment, and don’t argue the facts in public, even if they’re wrong. Something like:

“We take all feedback seriously and we’d like to understand more about your concerns. Please call our practice manager directly at [number] so we can talk this through.”

Then actually follow through privately. A surprising number of unhappy reviewers update or remove their review after a real conversation.

If a review is fake, from someone who was never a patient, or breaks Google’s content rules, you can flag it for removal. Just don’t expect quick results.

Watch more than Google

Google matters most for most practices, but patients also read Healthgrades, RealSelf, Yelp, Vitals and Facebook. Check them at least monthly. Set up alerts where you can so you see new reviews quickly.

Use your reviews

Great reviews shouldn’t only live on Google. With the patient’s permission (or just by showing the public review text), add them to your website near your contact buttons and on relevant procedure pages. They also give AI search tools something to quote when people ask who’s well reviewed in your area.

One last thing

Reviews are a mirror. If the same complaint keeps coming up, like long wait times or slow callbacks, the fix isn’t a better reply. It’s fixing the thing. That’s the part that keeps the ratings high over years.

We help practices set up review requests, monitor reviews across sites and draft safe replies. If you’d like to chat about it, book a free call.

This post is general information, not legal advice. Check with your compliance team or attorney about your specific situation.

Written by the Stringhead TeamWe're a web and digital marketing agency working with clinics, small businesses, coaches and trades across the USA, Australia, Ireland and India since 2010.