Patient reviews: how to ask for them, and how to reply without a HIPAA problem
Reviews shape whether patients call you. A simple routine for asking every patient, and reply wording that never confirms someone is your patient.
Before calling a new doctor, most patients read reviews. A practice with a steady stream of recent reviews looks busy and trusted. A practice with a handful of old ones, or a single angry review at the top, loses calls it never knew about.
Most practices handle reviews in bursts: a push when someone notices the rating slipped, then nothing for months. A small routine works better, and the replying part needs more care than most people realize.
This article is general information, not legal advice.
Ask every patient, the same way
The patients who take the time to post reviews on their own tend to be either delighted or upset. Asking everyone evens that out.
A routine that works for many practices:
- Send a short text or email after the visit, the same day or the next. Keep it to two sentences with one direct link to your Google review page.
- Ask everyone. Don't screen patients first and only ask the happy ones. That practice, sometimes called "review gating," goes against Google's review policies, and it skews your feedback.
- Make it easy. One link, no login steps you can avoid, works on a phone.
- Don't offer anything in exchange. Discounts, gift cards, or entries into a drawing for reviews are against platform rules and, for medical practices, can raise other compliance questions.
A simple message:
Replying: the one rule that matters
HHS has fined practices for replying to online reviews with details about the reviewer's care. The patient may have shared everything in their review, but that doesn't give the practice permission to confirm or add to it.
The rule: a public reply never confirms that the reviewer is a patient and never mentions anything about their care. No visit dates, no diagnoses, no "as we discussed at your appointment," and no "our records show."
That applies to good reviews too. "We're so glad your knee surgery went well!" confirms the person is a patient and names a procedure.
Replies that work
For a positive review:
For a negative review:
For a review that's clearly not about you, or is spam: don't argue in public. Use the platform's tool to report it, and stick to facts in the report.
Keep replies short, calm, and consistent. Future patients read them as a sign of how the practice treats people.
Take the conversation offline
When a negative review describes a real problem, the reply is only the first step. Have someone, usually the practice manager, follow up privately if you can identify the person through your own records. Many reviewers update or remove a review after someone actually listens. Never ask them to as a condition of fixing the problem.
Look for patterns, not just ratings
Once a month, read the last month's reviews together, good and bad. The useful information is in what repeats:
- Waiting room times
- Trouble getting through on the phone
- Billing confusion
- A front-desk interaction that keeps coming up
These are operational fixes, and they often move the rating more than any review campaign.
Where AdLivo fits
AdLivo keeps your reviews and listings in one place, shows which reviews still need a reply, and drafts replies that stay general. Every reply is checked for wording that could confirm a patient relationship, and a flagged reply can't be approved until it's fixed. AdLivo never posts for you: you approve the reply and paste it on the review site yourself.