Reputation Management

How to Respond to Negative Patient Reviews Without Breaking Privacy Rules

A one-star review lands on your Google profile. The patient says they were kept waiting, overcharged or treated badly, and some of it is not true. Your instinct is to reply with the facts. In healthcare, that instinct is exactly what gets practices into trouble.

I own and run a clinic and a pharmacy, so I have felt that sting myself. This guide covers how to respond to negative patient reviews in a way that protects the patient’s privacy, protects your practice, and reads well to every future patient who sees it.

The One Rule: Never Confirm They Are a Patient

In the US, the fact that someone is your patient is itself protected health information under HIPAA. A reply that says “we’re sorry your crown didn’t fit” or “as we discussed at your appointment” confirms they were treated, and often reveals more. Regulators have fined practices for exactly this kind of reply, even when the patient posted the details first.

The patient can say anything about their own care. You cannot say anything that confirms it. That includes their name, the treatment, the date, the clinician they saw, your notes and what was said in the room.

This is how we work, not legal advice. If a review involves a legal threat or a clinical complaint, speak to your counsel or your malpractice insurer before you reply.

A Privacy-Safe Reply Template

Keep it short, calm and general. Something like this works for most negative reviews:

“Thank you for taking the time to share this. We take every concern seriously, and we are not able to discuss anyone’s care in a public forum. Please call our practice manager at [phone] so we can talk this through directly.”

Notice what it does not do. It does not say “your visit”, “your treatment” or “we checked your records”. It does not argue. It moves the conversation offline, where you can actually help.

What Works Better Offline

  1. Find out who it is, privately. Match the review to a patient through your own records, not in public.
  2. Call, do not email a defense. Many complaints are about feeling unheard. A calm conversation fixes more than a written rebuttal.
  3. Fix what was real. If the wait was long or the bill was confusing, say so on the call and change the process.
  4. Do not ask them to delete it. If they feel better, some patients update their review on their own. Asking, or offering anything in return, can breach review platform rules.

When You Can Ask for Removal

You can flag a review to Google when it breaks Google’s own policies: spam, a review from someone who was never a patient (a competitor or a former employee, for example), offensive language, or a conflict of interest. You cannot get a review removed because it is negative or because you disagree with it. Flag it once, through your Google Business Profile, with a short factual explanation.

Mistakes That Make It Worse

The Long-Term Fix: More Genuine Reviews

One negative review among five sounds a lot louder than one among a hundred. The best protection is a steady flow of genuine reviews from every patient, asked the same way at the right moment, with replies written by a person. AI assistants read your reviews and your replies too when they decide which practice to recommend.

Our reputation management for medical practices covers the review process, privacy-safe replies and accurate listings. If you want to see how your reviews read to patients and AI assistants today, start with a free AI Audit.

Want This Working for Your Practice?

A free recorded audit of how patients find your practice on Google, the map and in AI answers, and what to fix first. Run personally by Dr. Ismail Zakaria.

Free AI Audit →