Sooner or later it happens to every practice. You open your Google profile and there it is: one star, a paragraph that stings, and your name attached to it for the world to read. Your first instinct is to explain, to correct the record, to tell your side. For most businesses that instinct is fine. For a medical practice, it can land you in real trouble.
The problem is that a public reply is, well, public. And the moment you respond to a patient’s review, you’re stepping onto ground most other businesses never have to think about: health privacy. Say the wrong thing, even something that feels harmless, and you can turn one bad review into a HIPAA problem. The good news is that responding safely is completely learnable, and a calm, careful reply often does more for your reputation than the review ever cost you.
The one line you can never cross
Here’s the rule that governs everything else: in a public reply, never confirm that the person was ever your patient, and never mention a single detail about their care.
That sounds obvious until you see how easily practices break it. “We’re sorry your procedure didn’t meet expectations” confirms they had a procedure. “You were seen on time every visit” confirms they were seen. Even “We tried to reach you about your test results” reveals care information to anyone reading. It doesn’t matter that the reviewer already shared the details themselves. Under HIPAA, their disclosure isn’t your permission, and the Office for Civil Rights has fined practices for exactly this, replying to reviews with protected health information.
So the safe move is counterintuitive. You respond warmly and professionally, but you say nothing that acknowledges a treatment relationship. You take the specifics off the public page and into a private channel where you can actually help.
A framework that keeps you safe
Every good response to a negative review follows the same quiet shape, whether the complaint is fair or wildly unfair.
Start by thanking them for the feedback and apologizing that their experience fell short of your standards. Notice that “your experience fell short of our standards” says nothing about whether they were a patient. It’s a statement about your practice, not about them.
Next, speak in general terms about the value you place on whatever they raised, communication, wait times, respect, without confirming any of it happened. Then move the conversation off the platform: invite them to contact your office directly so someone can listen and make it right. Give a name or a role and a phone number or email. That single step signals to every future reader that you take concerns seriously, and it gets the emotional back-and-forth out of public view.
Finally, keep it short. Two or three sentences. Long replies read as defensive, and every extra sentence is another chance to slip and say too much.
What it looks like in practice
Say a review complains about a rude front desk and a long wait. A safe reply might read:
“Thank you for taking the time to share this. We hold ourselves to a high standard for both courtesy and timeliness, and we’re sorry to hear that standard wasn’t met. We’d genuinely like to understand what happened, please reach out to our office manager, Dana, at (000) 000-0000 so we can look into it directly.”
Notice what that reply never does. It never says the person was a patient, never confirms a visit, never mentions any care. It’s kind, it’s accountable, and it’s airtight.
Now the harder case: a review that’s simply false, or from someone who was never a patient at all. The temptation to fight is strongest here, and it’s still the wrong move. You reply with almost the same template, minus the apology if no service occurred: “We take reviews seriously and want to make sure this is addressed properly. We don’t have a record matching this experience, and we’d welcome the chance to help, please contact our office directly.” If it genuinely violates the platform’s policies (fake, off-topic, or clearly not a customer), you can also flag it to Google for removal, though approval is never guaranteed and a calm reply is your reliable tool.
The habit that makes bad reviews matter less
The best defense against a single harsh review isn’t a clever response. It’s volume. A practice with a dozen reviews feels defined by its worst one. A practice with two hundred barely notices it, and neither do prospective patients, who read the pattern, not the outlier.
That’s why the practices that handle criticism best are usually the ones quietly asking every happy patient for a review at the right moment. Steady positive reviews don’t just lift your rating, they also feed your local ranking and help you show up in the Google map pack when someone searches for care nearby. A negative review, responded to well, actually adds credibility to all of them: it proves the good ones are real.
A few questions we hear
No. Even if the reviewer shared their diagnosis, procedure, or visit, you repeating or confirming any of it in a public reply can violate HIPAA. Their disclosure is not your authorization. Keep your reply general and move specifics to a private channel.
You can flag reviews that are fake, off-topic, or violate the platform's policies, but removal is never guaranteed and can be slow. A calm, safe public response is the tool you fully control, so lead with that.
Within a day or two is ideal. Fast enough to show you're paying attention, but not so fast that you reply while frustrated. Draft it, step away, then reread it once for privacy before posting.
Reply politely without confirming any treatment relationship, note that you can't match it to an experience, and invite direct contact. Then flag it to the platform if it breaks their rules. Never argue the facts in public.
Handled well, a negative review is a chance to show every future patient how your practice behaves under pressure. If you’d rather have a team monitor your reviews, reply safely, and keep the good ones coming, that’s part of the reputation and review work we do, and in each area we take only two practices per specialty, so a competitor down the street can’t hire us to outshine you.
Want your reviews handled the right way?
We'll review your current online reputation and show you where a few safe changes would make the biggest difference, on a free 20-minute call.
Book a call