How Should a Dental Office Reply to a Bad Google Review?
Reply briefly and generically. Do not confirm the reviewer is a patient, and do not mention treatment, insurance, or cost. Thank them for the feedback, invite them to contact the office privately, and fix what is fixable offline. This is a practical habit, not legal advice.
This page is for the practice owner or the office manager who has to answer a one-star review in public. It is not legal advice. Before you post, check the wording with your compliance or privacy officer, or with counsel.
Can a dental office reply to a Google review at all under HIPAA?
Yes. A dental office may reply, and HIPAA limits the words, not the fact of a reply.
Google's help on managing reviews says a verified business can reply. Google checks the reply against its content policies, posts an approved reply in public under the business name, notifies the reviewer, and lets them edit the review afterward. A reviewer who describes their own visit does not authorize the practice to confirm they are a patient or to add facts from the record. The HIPAA checklist for dental AI covers how a vendor handles protected health information on calls. It does not choose the words in a Google reply.
What has HHS actually fined dental practices for?
HHS has published settlements with two dental practices that put patient details in public review replies. Elite Dental Associates in Dallas paid $10,000, and New Vision Dental in California paid $23,000 under a two-year corrective action plan.
HHS's settlement page for Elite Dental Associates, Dallas, last reviewed in October 2019, says the practice agreed to pay $10,000 and adopt a corrective action plan to settle potential HIPAA Privacy Rule violations. The replies were on Yelp. They included a patient's last name and details of a treatment plan, insurance, and cost. OCR also found no policy on disclosing protected health information on social media, and a Notice of Privacy Practices that did not include what the Privacy Rule requires.
On December 14, 2022, HHS announced a settlement with B. Brandon Au, DDS, Inc., doing business as New Vision Dental, in California. The practice paid $23,000 and agreed to a corrective action plan OCR would monitor for two years. The HHS announcement says replies to online reviews disclosed patient names, treatment, and insurance information. OCR Director Melanie Fontes Rainer said: "Providers cannot disclose protected health information of their patients when responding to negative online reviews." OCR also found an inadequate Notice of Privacy Practices and missing privacy policies.
What should a reply to a bad review say?
Thank the person, stay general, and offer a private conversation. Do not argue the facts of care in the reply.
Three shapes, with no names and no chart details:
- "Thank you for taking the time to write this. We are sorry your experience was not what you expected. Please contact the office so we can look into it."
- "We appreciate the feedback. We would like to understand what happened. Please call the office and ask for the office manager so we can talk privately."
- "Thank you for letting us know. A public reply is not the place for the details. Please contact the office and we will follow up with you directly."
The Google Business Profile checklist uses the same restraint: thank them in general terms, do not confirm they are a patient, and do not mention treatment. Pick one shape. After you post, fix what the office controls offline, such as a wait or a phone nobody answered. A conversation about care belongs at the office, not in the reply.
What should a reply never include?
Leave out anything that identifies the reviewer as a patient or describes care, insurance, or money. A rebuttal that quotes the chart is the kind of reply OCR has already settled.
| Do | Don't |
|---|---|
| Thank them without using a name | Add a last name, a full name, or a screen name you looked up |
| Invite them to contact the office privately | Confirm they are a patient, or name the day they came in |
| Keep the public reply to a few sentences | Name a tooth, a procedure, a treatment plan, or a diagnosis |
| Fix the operational issue offline | Mention insurance, a claim, a fee, or an amount paid |
If the reviewer already named a procedure, an insurer, or a fee, do not repeat it. Move that conversation to the phone or the desk.
Should you ask Google to remove the review?
Report a review only if you believe it violates Google's content policies. Google says not to report one just because you disagree with it, and only policy-violating reviews are eligible for removal.
Google's page on reporting reviews says you can flag a review. Policy violations can be removed from Maps and Search. Google does not get involved in a dispute between a business and a customer, and a negative review is not always a sign of poor service.
Reports are judged against Google's prohibited and restricted content policy. Google does not allow fake engagement, including a review that is not based on a real experience or a review given for payment, a discount, or free goods or services. The policy also says not to post someone else's personal information, and it lists medical information among the examples. A review of a real bad visit can stay up. This page does not promise that Google will remove it.
How do you get more reviews so one bad one matters less?
Ask every patient the same way after the visit. Do not offer an incentive, and do not ask only the people who say the visit went well.
Google's policy allows a request for a genuine review without an incentive and without trying to influence the rating or the words. It does not allow discouraging negative reviews or selectively soliciting positive ones. Incentives it names include payment, discounts, and free goods or services. The checklist uses the same ask after every visit, and treats a link handed only to happy patients as review gating. A discount, a gift, or a drawing entry is an incentive.
Aria's marketing service covers Google Business Profile setup and upkeep, including categories, hours, photos, Q&A, and posts, and review requests after the visit. This page does not promise a ranking change.
Where does the phone fit?
Many complaints are about not reaching the office, and a public reply does not answer the phone. Cover the inbound line, or the next review can describe the same missed call.
If nobody answers during lunch, after hours, or while the desk is with a patient, the profile's work stops at the tap. Missed front-desk calls are those visits. Aria's Voice AI answers inbound calls 24/7, including lunch, after hours, and overflow, books into the schedule, and sends SMS confirmations and reminders.
Walk through the reply and the phone
Bring a recent review and the hours the line goes unanswered.
Book a Demo Hear a demoFrequently asked questions
Can a dental office reply to a negative Google review under HIPAA?
Yes. A verified Google Business Profile can post a public reply. HIPAA limits the words: do not confirm the reviewer is a patient, and do not add treatment, insurance, or cost. This page is not legal advice.
What has HHS fined dental practices for in review replies?
Elite Dental Associates in Dallas paid $10,000 in a 2019 settlement after Yelp replies included a patient's last name, treatment plan, insurance, and cost. New Vision Dental in California paid $23,000 in 2022, with a two-year corrective action plan, after replies included patient names, treatment, and insurance.
What should a reply to a bad Google review say?
Thank the person in general terms and invite them to contact the office privately. A usable shape is: Thank you for taking the time to write this. Please contact the office so we can look into it. Do not argue the details of care in the public reply.
Should a dental office ask Google to remove a bad review?
Report it only if you believe it violates Google's content policies. Google says not to report a review just because you disagree with it, and only policy-violating reviews are eligible for removal. A genuine negative review can stay up.
Does asking every patient for a review break Google's rules?
Asking every patient the same way, for a genuine review, without an incentive, is what Google says a business may do. Selectively asking only for positive reviews, or offering payment, a discount, or free goods or services for a review, is not allowed. More reviews do not, by themselves, promise a higher place in search.
Is this legal advice?
No. It is a practical habit for a dental office, not a legal opinion. Before you post a reply, check it with your compliance or privacy officer, or with counsel.
About the author
Written by Aria Dental.