DentistDiscoverable field guide
Replying to a Dental Review Can Break HIPAA. Use the Template.
A dental practice must never confirm in a public reply that the reviewer is or was a patient. That confirmation is a disclosure of protected health information. The safe reply thanks the reviewer, keeps every clinical detail out, and moves any specifics to a private phone call. One approved template, used by everyone, is what makes that reliable.
Why reviews are a HIPAA surface, not just a marketing one
Reviews feed prominence in Google's local ranking, and Whitespark's 2026 factors put review signals at their highest influence yet. So the replies matter, and every reply is published by a covered entity about a named individual. A reply that says we are sorry your root canal hurt confirms the person had a root canal at the practice. The star rating was the patient's to share; the treatment detail in the reply is the practice's disclosure.
The trap catches well meaning staff. A reviewer describes a billing dispute or a long wait, and the natural reply explains what happened at the appointment. Every sentence of that explanation is a disclosure. The fix is procedural, not personal: replies are drafted from a template that cannot contain clinical content, and anything beyond the template goes to a named person for approval.
The template, and what it leaves out
A safe positive reply: thank you for the kind words and for choosing the practice, we are glad the team took good care of you, we look forward to seeing you again. Note what is absent: no treatment, no date, no confirmation beyond what the reviewer themselves made public. A safe negative reply: thank you for the feedback, we take this seriously, please call the office at the listed number so we can discuss it directly. No facts, no defense, no invitation to continue in public.
Both templates route the conversation to a phone call, where identity can be verified and details can be discussed lawfully. Set a response time standard, ideally within a day or two, because prompt owner responses are good practice for patients reading the profile, even though replying is a weak ranking signal in the survey data compared with the reviews themselves.
The ask, done without gating
Reviews have to be earned without filtering. Ask every patient the same way, at the same point, usually a text after the appointment with a direct link to the practice's own profile, and never steer unhappy patients away from the public link. Gating, sending only happy patients to Google, violates Google's policies and produces a review profile that collapses the first time an unhappy patient finds the link anyway.
Route the link carefully in multi location practices. A shared review link used at both sites sends reviews to the wrong location, and a review on the wrong profile helps neither. Each location gets its own link, printed and saved where the front desk actually works, and the flow is checked whenever staff or systems change.
Keep reading: The Dentist Description Field Does Not Rank: Where Profile Words Actually Count, Dental Profile Photos: What Patients Judge Before They Read a Word, and Dental Service Pages That AI Answers Actually Cite cover the nearby cases in this series.
Frequently asked questions
Can a practice confirm a reviewer was a patient?
No. Confirming patient status in a public reply is itself a disclosure of protected health information. Reply from a template that thanks the reviewer and moves specifics to a private call, without confirming any treatment or visit.
What should a reply to a negative review say?
Thank them for the feedback, say the practice takes it seriously, and invite them to call the office number to discuss it directly. No clinical details, no factual defense, and no argument in public.
Is it allowed to ask patients for reviews?
Yes, if every patient gets the same ask and the same link. Filtering by satisfaction, sometimes called gating, violates Google's review policies. A post appointment text with the practice's own review link is the standard pattern.
Do review replies improve rankings?
Barely, on the survey evidence. Owner responses rank low among local pack factors compared with review count, rating, and recency. Reply anyway, for the patients reading, and keep the replies on template for HIPAA.