The reviewer reads your reply once. Everyone who looks you up after that reads it too. A calm, specific answer to a 2-star review can sway the next customer more than one more 5-star review would. This lesson gives you a simple method for replying to any rating, with a short template for each. It also covers the privacy trap that has cost US healthcare practices real money. For a bigger library of copy-ready replies, see our Google review response templates.
Not legal advice. The privacy section is general information; health businesses should check with a compliance adviser.
What Google advises
Google's "Tips to get more reviews" page has a section on replies. The short version:
- Keep it short. "Customers value direct and honest responses."
- Be polite. "Keep your replies clear and helpful."
- Make it personal. Respond to what the reviewer actually said, and avoid sending "the same 'thank you' to everyone".
- Don't sell. Avoid "using your response to offer deals or promotions."
- Apologize when it's right. "A genuine apology can go a long way in rebuilding trust."
- Protect privacy. "Never share a reviewer's private information or engage in personal attacks."
A few mechanics from Google's "Manage customer reviews" page. You must verify your Business Profile before you can reply. The reviewer "is notified when you reply" and can edit their review afterwards. Replies are checked against Google's policies and "usually take up to 10 minutes to review, but sometimes ... up to 30 days". You can edit or delete a reply later.
How fast to reply
Google doesn't set a deadline. Customers do: in BrightLocal's 2026 consumer survey (vendor data, 1,002 US adults), 89% said they expect owners to respond, 19% expected a reply the same day and 81% within a week.
A standard a small team can actually keep:
- Negative reviews (1–3 stars): within one business day, after the owner or manager has read it and checked what happened.
- Positive reviews (4–5 stars): within a week, batched.
Getting it right matters more than speed. Never reply to a bad review while you're angry: read it, pull up the job record, go do something else for an hour, then write.
The four-part reply for complaints
- Thank them for the feedback.
- Acknowledge the specific issue without arguing about facts in public.
- Say what you're doing (or did) about it, if you can do so without private details.
- Take it offline with a named person and a direct contact.
Three or four sentences is plenty. Sign with a first name and role so it reads like a person wrote it.
Templates for 1 to 5 stars
Fill in the brackets, and echo one specific thing from the review so it doesn't read as copy-paste. The examples are for a restaurant and a plumbing company. Swap in details from your own trade.
5 stars
Thanks so much, [first name]. We're glad the [thing they mentioned, e.g. "short rib"] hit the spot, and we'll pass your note to [staff name they mentioned]. See you next time.
[Name], [Role]
4 stars
Thank you for the review, [first name]. Glad [what went well]. You mentioned [the small issue]; that's useful to hear and we're looking at it.
[Name]
3 stars
Thanks for the honest feedback, [first name]. We're sorry [the specific issue] fell short. We'd like to hear more: please call or email me at [contact].
[Name], [Role]
2 stars
[First name], thank you for letting us know, and I'm sorry about [the issue]. That's not the standard we aim for. Since then we've [concrete change, if true]. I'd like to make this right; please reach me directly at [contact].
[Name], Owner
1 star
[First name], I'm sorry to read this. I'd like to understand what happened and see what we can do. Please call me directly at [number] or email [address].
[Name], Owner
A local example: the plumber and the 2-star review
A plumbing company gets this review:
"Showed up two hours late with no call. Fixed the leak fine but charged a call-out fee nobody mentioned."
A reply that makes it worse:
"Our records show you were told about the fee on the phone. Traffic was terrible that day, which is out of our control."
A reply that helps:
Hi Dana, thank you for the feedback, and I'm sorry we were late without calling you. That's on us. Since then we've started sending customers a text with the technician's arrival time. I'd like to talk about the call-out fee; please call me at [number].
Mike, Owner
The second reply doesn't fight over who said what. It owns the part that's clearly true, points to a real change and takes the money talk offline, so anyone reading it later sees a company that listens.
Health businesses: never confirm someone is a patient
Dentists, med spas, therapists, chiropractors and clinics live under a rule restaurants don't. Under the HIPAA Privacy Rule, a covered health care provider must not disclose a patient's protected health information (PHI) without authorization. Confirming that a reviewer is your patient, or mentioning their treatment, can be a disclosure, even if they mentioned it first.
The US Department of Health and Human Services Office for Civil Rights (OCR) has already acted on exactly this:
- Elite Dental Associates, Dallas (2019): agreed to pay $10,000 and adopt a corrective action plan to settle potential HIPAA Privacy Rule violations over social media disclosures of patients' information.
- Manasa Health Center, New Jersey (2023): a psychiatry practice agreed to pay $30,000 after replying to a patient's negative online review with details of their mental health diagnosis and treatment; OCR found it had disclosed three other patients' information in review replies too. The OCR Director said: "Simply put, this is not allowed."
HIPAA applies to "covered entities". HHS says a health care provider is covered if it transmits health information electronically "in connection with a transaction for which HHS has adopted a standard", such as an electronic insurance claim. Whether a cash-only med spa is covered depends on how it's set up. We can't tell you from here. Follow the safe reply rules below either way.
The safe pattern for health businesses:
- Never confirm the reviewer is or was a patient.
- Never mention treatments, appointments, dates, insurance, prices or outcomes.
- Use the same generic wording for every negative review.
Thank you for your feedback. Privacy rules prevent us from discussing anyone's care here, but we take every concern seriously. Please call [Name], our practice manager, at [number].
For 5-star reviews, thank them warmly and leave out anything clinical: "Thank you for the kind words about our team." rather than "Glad your implant healed well!"
What not to say
| Avoid | Why |
|---|---|
| "Our records show..." | Argues in public and can disclose private details. |
| Names, dates, prices paid, job details the reviewer didn't mention | Privacy, and it looks like you're building a case. |
| "You're lying" / "This is a competitor" | You may be right, but readers can't tell. Report it instead. |
| Offering a refund or discount in the reply | Looks transactional; Google advises against offers in replies. Do it privately. |
| Threats of legal action | Can count as review suppression under the FTC rule if groundless (see lesson 2). |
| Copy-pasting the same reply everywhere | Google advises against it; half of surveyed consumers say it puts them off. |
| Asking them to change or delete the review in exchange for something | Google prohibits incentives to change or remove reviews. |
Do this now
Should I reply to every Google review?
Replying to all of them is a good habit. Google's tips encourage personal, specific replies, and in BrightLocal's 2026 survey (vendor data) 80% of consumers said they're likely to use a business that responds to all its reviews.
Does the reviewer see my reply?
Yes. Google says the reviewer is notified when you reply, and they can edit their review afterwards.
Can a dentist reply to Google reviews under HIPAA?
Yes, but the reply must not disclose protected health information, which includes confirming the person is a patient or mentioning their treatment. HHS has settled cases with practices that did.
Why hasn't my reply appeared yet?
Google checks replies against its policies. It says this usually takes up to 10 minutes but can take up to 30 days.
Sources
- Tips to get more reviews (reply guidance), Google Business Profile Help (checked Oct 2026)
- Manage customer reviews, Google Business Profile Help (checked Oct 2026)
- Local Consumer Review Survey 2026 (vendor survey, 1,002 US adults), BrightLocal (checked Oct 2026)
- Elite Dental Associates resolution agreement (Oct 2019), HHS (checked Oct 2026)
- HHS Office for Civil Rights reaches agreement with health care provider in New Jersey that disclosed PHI in response to negative online reviews (June 2023), HHS (checked Oct 2026)
- Covered entities and business associates, HHS (checked Oct 2026)
- 16 CFR Part 465 (§ 465.7 review suppression), eCFR (checked Oct 2026)
- Prohibited and restricted content, Maps User Generated Content Policy Help (checked Oct 2026)
Want this done for you? Start free