How Do Healthcare Providers Get More Reviews?

Why do healthcare providers struggle to get reviews?
Most healthcare providers have few reviews because they do not ask consistently, not because patients are unhappy. Satisfied patients rarely think to post a review unless someone gives them an easy way to do it.
Reviews matter for being found as well as being chosen. Google's local ranking guidance says more reviews and positive ratings can help a business's local ranking, and that positive reviews and helpful replies can help a business stand out.
Healthcare adds two worries that other businesses do not have: patient privacy and strict rules on endorsements. Both are manageable with a written process, which is what the rest of this guide sets out.
What can and cannot a practice do when asking for reviews?
A practice can ask every patient for an honest review and make it easy to leave one. A practice cannot pay for reviews, filter who gets asked based on expected sentiment, write fake reviews or pressure people to remove negative ones.
| Practice | Allowed? | Rule |
|---|---|---|
| Ask every patient for an honest review by text, email or QR code | Yes | Google Business Profile Help encourages requesting reviews with a link or QR code |
| Ask only patients you think had a good experience | No | FTC Endorsement Guides FAQ; Google policy bans selectively soliciting positive reviews |
| Offer a discount or gift card for leaving a Google review | No | Google prohibits incentives for reviews; FTC bans incentives conditioned on sentiment |
| Staff or family members posting reviews of the practice | No on Google | Google removes conflict-of-interest reviews; FTC requires disclosure of material connections |
| Write or buy reviews from people who were never patients | No | FTC 16 CFR 465.2 bans fake reviews |
| Threaten legal action to remove an honest negative review | No | FTC 16 CFR 465.7 bans review suppression by baseless threats |
| Reply publicly with details of the patient's care | No | HIPAA Privacy Rule; HHS Elite Dental settlement |
| Use a patient's review as a website or ad testimonial | Only with authorization | HIPAA 45 CFR 164.508 requires written authorization for marketing |
The FTC announced its final rule banning fake reviews and testimonials on August 14, 2024. The rule lets the FTC seek civil penalties against businesses that knowingly violate it.
How do you ask patients for reviews step by step?
Ask for reviews with a fixed routine that runs after every visit, so no one decides case by case who gets asked. A routine is both more effective and easier to defend under FTC and Google rules.
- Create your Google review link or QR code from your Google Business Profile.
- Write one short request message that asks for an honest review and does not mention any diagnosis or treatment.
- Choose one trigger point, such as the day after the visit, and send the request to every patient seen.
- Use your HIPAA-compliant patient messaging system, not personal phones or unapproved apps.
- Put the QR code at checkout with the same neutral wording.
- Send no more than one reminder, and stop if the patient does not respond.
- Track monthly review count, average rating and recency against the number of requests sent.
Sample neutral request: Thank you for choosing our practice. If you have a moment, we would appreciate an honest review of your experience. This link takes you to our Google page.
Google is usually the first platform to focus on because it feeds local search. Once Google reviews are steady, add one healthcare directory your patients actually use, rather than spreading requests across many sites.
Track the ratio of reviews received to requests sent each month. If the ratio drops, check the basics first: whether requests are still going out after every visit, whether the link still works on mobile, and whether the message reaches patients at a sensible time of day.
How do you respond to patient reviews without violating HIPAA?
Respond to patient reviews with general, polite language that never confirms the reviewer is your patient and never mentions care, dates or conditions. Even if the reviewer shared their own details, the practice cannot repeat or add to them.
HHS announced in October 2019 that Elite Dental Associates in Dallas agreed to pay $10,000 and accept a corrective action plan after disclosing patients' protected health information in its responses to online reviews. The complaint alleged the practice disclosed a patient's last name and details of the patient's health condition.
Safe reply templates
- Positive review: Thank you for taking the time to share your feedback. We appreciate it.
- Negative review: We take all feedback seriously. Privacy rules prevent us from discussing any individual situation online, so please call our office manager at the main number so we can talk directly.
- Factually wrong review: Keep the same neutral reply, then use the platform's reporting tools if the review breaks the platform's policy.
Google's Business Profile Help notes that replies are public and that constructive replies and follow-up on concerns can show that you care. Keep every reply short, and route the real conversation offline.
Can a practice use reviews as testimonials?
A practice should get a signed HIPAA authorization before copying a patient's review onto its website, ads or social posts as a testimonial. Republishing a patient's words to promote the practice is a marketing use of patient information.
HHS explains that the Privacy Rule requires an individual's written authorization before a use or disclosure for marketing. In a separate case, Complete P.T., Pool and Land Physical Therapy paid $25,000 after posting patient testimonials with full names and full face photos on its website without valid authorizations.
The FTC adds a second test. Its Endorsement Guides FAQ says material connections, such as a discount or free service, must be disclosed clearly, and the FTC's health guidance says testimonials describing better-than-typical results are likely deceptive.
Common mistakes when healthcare providers ask for reviews
The most common review mistakes either break a rule or make the process inconsistent. Each one below has caused real trouble for practices.
- Review gating. Sending a satisfaction survey first and only sending happy patients to Google is selective solicitation, which Google bans and the FTC calls potentially misleading.
- Small rewards. Entering reviewers in a raffle or giving a discount is an incentive under Google's policy.
- Staff reviews. Employees reviewing their own practice creates a conflict of interest that Google removes.
- Defensive replies. Explaining what really happened at the visit discloses health information.
- Asking for removal with threats. The FTC rule bans baseless legal threats to suppress reviews.
- No tracking. Without counting requests sent, you cannot tell whether a drop in reviews is a process problem.
How DesignFXPro helps practices grow reviews
DesignFXPro sets up the review link, request templates, checkout QR codes and reply templates as part of local SEO work for practices. We also track review count, rating and recency next to calls and bookings in the same report. In our Paramount Hair Extensions case study, an appointment-based salon brand in Arizona, Google Business Profile calls across all locations rose from 74 to 386 per month (+422%) during a 2025 engagement.
DesignFXPro never buys reviews, gates requests or writes reviews for clients, and results vary by practice. See our healthcare marketing services and local SEO services, or read marketing strategies for private healthcare practices.
This article is educational and is not a substitute for professional medical or legal advice.
Frequently asked questions
Is it a HIPAA violation to ask patients for reviews?
Can a practice offer a gift for leaving a review?
The FTC rule also bans incentives tied to a review being positive or negative. A practice can thank patients for feedback in general, but should not reward anyone for posting.
What should a doctor do about a fake or unfair review?
How many reviews does a medical practice need?
Can staff members leave reviews for the practice?
The FTC also requires disclosure of material connections, and its rule restricts insider reviews that hide the relationship. Staff can help by reminding patients at checkout and handing out the review QR code.
Can we reply to a review if the patient already shared their condition?
Use a general reply that thanks them and invites them to call the office, and handle the specifics privately. If the review raises a real concern, follow your normal complaint process with that patient through private channels.

