Reader question: How do we answer a bad Google review without creating a privacy problem?
A practice manager asks how to reply to a harsh patient review when privacy rules limit what you can say. What to write, what to avoid, and a reply template.
A practice manager in Arizona wrote in with a question that comes up a lot. A patient left a two-star review saying the office "overcharged for a crown and lied about insurance." The dentist wants to reply with the facts: the insurance breakdown, the signed estimate, the date of the visit. The manager's gut says that is a bad idea. Her question: what are we allowed to say?
Her gut is right. Here is the plain answer.
The short version
You can reply. You should reply. But your reply cannot confirm that the reviewer is your patient, and it cannot mention anything about their care, their visit, their bill or their insurance. Not even if they posted those details themselves.
That surprises a lot of dentists. The patient already said they had a crown done. Why can you not talk about it? Because under HIPAA, the patient choosing to share their own information does not give the practice permission to share it back. The U.S. Department of Health and Human Services has taken enforcement action against providers who disclosed patient information in replies to online reviews. Their guidance on patient privacy is on the HHS HIPAA page.
This is not legal advice, and if a review involves a threat or a legal claim, talk to your attorney before you reply. For the everyday two-star review, the rules below cover it.
Why replying still matters
Across 86,875 dental practices in our data, the median listing has 39 reviews, and only 29.6% of rated practices hold a perfect 5.0. Dental profiles get big, and a busy profile collects a few low reviews sooner or later. The full numbers are on the benchmarks page.
That means a prospective patient reading your profile will see a bad review. What they are really checking is how you handle it. A calm, professional reply tells them the practice is run by adults. A defensive one, or silence, tells them something else.
What to write
A safe reply does four things:
- Thanks the reviewer for the feedback, without saying they are a patient.
- States a general policy, not a specific fact about them.
- Invites them to contact the office directly, by name and number.
- Stays under about five sentences.
Here is a template the reader can adapt:
"Thank you for taking the time to share this. We take every concern about billing seriously, and our policy is to review estimates and insurance benefits with every patient before treatment begins. Because of privacy rules we cannot discuss anyone's care or account online, but we would welcome the chance to talk. Please call our office manager, Karen, at the front desk and ask for her directly."
Notice what it does not say. No "your crown." No "your visit on March 4." No "your insurance paid 50%." It never confirms the person was ever in the chair.
What to avoid
- Any detail from the chart or the ledger. Dates, procedures, amounts, insurance, x-rays, nothing.
- "We have no record of you as a patient." That sounds safe, but it still discusses whether someone is or is not a patient. Skip it.
- "As we discussed at your appointment." That confirms an appointment.
- Arguing the facts. Even if you are right, the reply will read as defensive to everyone else.
- Asking the patient to take the review down in exchange for something. Do not offer refunds or credits tied to removing or changing a review.
When a review can come down
Google will remove reviews that break its content policies, such as reviews with hateful language, obvious spam, or reviews from someone who was never a customer. A review that is just harsh and unfair usually stays. Flag the ones that clearly break the rules once from your Business Profile and move on. The Google Business Profile guide covers where that setting lives.
Fix the cause, not just the reply
The reader's review is about a cost surprise. That is one of the more common themes in dental complaints we read, and the fix happens at the front desk, not on Google. Two habits help:
- Written estimates before any treatment over a few hundred dollars, with the patient's expected portion shown separately from what insurance is estimated to pay.
- A one-line warning on every estimate that insurance amounts are estimates until the claim is processed.
The pricing and case presentation guide walks through how to present treatment costs so the conversation happens in the operatory instead of on your profile.
And keep the good reviews coming
One two-star review on a profile with 300 reviews is invisible. On a profile with 20, it is a headline. The most reliable fix for a bad review is a steady flow of good ones. The review guide has the ask, the timing and the text your front desk can send at checkout.
The reader's practice replied with the template above, called the patient privately, and sorted out the bill by phone. The review is still up. The reply under it is doing its job.
The free 14-day trial covers any service, including review requests and profile management, with no card. Text or call (385) 217-4728 or see the free trial page.
Steven has spent the last several years running growth campaigns for local service businesses, dental practices among them, and builds the benchmark datasets on this site from public Google listings. About the editor