Patients read reviews before they book, and Google weighs them when it decides which practices to show on the map. But healthcare has rules a coffee shop doesn't, and getting them wrong can cost far more than a low rating.
This guide covers what's allowed, what isn't, and how to ask in a way you'd be comfortable defending.
The four sets of rules that apply
- Google's policy. No incentives for reviews, no fake reviews, and no asking only the patients you expect to be happy.
- The FTC. Its rule on consumer reviews bans fake reviews, buying reviews, and incentives that depend on the review being positive.
- Your ethics code and board. These vary by profession, and are strictest in mental health.
- Patient privacy. Under HIPAA you can't confirm someone is a patient, even when replying to their own review.
Can doctors ask patients for Google reviews?
Generally, yes. Many medical practices ask every patient after a visit, by text or email, with a direct link to their Google profile. The key points:
- Ask every patient the same way, not just the ones you expect to be pleased.
- Offer nothing in return: no discounts, gift cards or prize draws.
- Don't ask staff, family or anyone with a stake in the practice to post reviews.
- Don't write reviews for patients or suggest what they should say.
Check your state medical board's advertising rules too. Some are stricter than others.
Can therapists ask clients for reviews?
This is harder. The APA, ACA and NASW ethics codes all say, in different words, that clinicians shouldn't solicit testimonials from current clients or from people vulnerable to undue influence. Many boards and ethics experts treat an online review request as a request for a testimonial.
That's why many therapists don't ask current clients for reviews at all. Instead they:
- Make the Google profile complete and accurate: services, hours, photos and booking.
- Let reviews arrive on their own, and reply to them carefully.
- Ask their board or professional association how the rule applies where they practise.
How to ask for Google reviews: a simple process
- Copy your direct review link from your Google Business Profile.
- Send the same short message to every eligible patient after their visit.
- Keep it plain: thank them, share the link, and make clear it's optional.
- Send it once, with at most one reminder.
Example message
Thanks for visiting us today. If you'd like to share your experience, you can leave a review here: [link]. It's completely optional, and it helps other people find us.
Replying to reviews without breaking patient privacy
This is where practices most often get into trouble. A patient mentions their treatment in a review, and the reply confirms it, adds detail or argues with them. HHS's Office for Civil Rights has fined practices for exactly that.
A safe reply never confirms the person is a patient and never mentions care. It thanks them, or invites them to get in touch directly.
Example reply to a negative review
Thank you for taking the time to write this. We take all feedback seriously. For privacy reasons we can't discuss anyone's care here, but we'd welcome a call at [phone].
What not to do
- Don't buy reviews, or use a service that posts them for you.
- Don't screen patients with a "were you happy?" question and send only the happy ones to Google.
- Don't use patient reviews as testimonials in your ads.
- Don't report a review just because it's negative. Only flag ones that break Google's policies, like fake or off-topic reviews.
We run patient review management inside the rules each clinician's board sets, and we never use patient reviews in advertising.