How to Get More Google Reviews Without Breaking the Rules

Your happiest patients are your quietest marketers. They tell their friends, they come back every year and they never post a word online.

That’s not a character flaw. Nobody asked them.

This is post four of six in our Practice Growth series. Post three covered how patients choose a doctor now, including the survey finding that 57% of patients rarely or never review their own providers. This one is about closing that gap without getting your Google profile flagged, drawing an FTC penalty or turning a bad review into a HIPAA complaint.

Three rulebooks, one review

Every review request your practice sends lives under three sets of rules. Most practices know one of them.

1. Google’s rules

Google’s content policy for Maps lists what counts as rating manipulation. Two items matter most for practices. Businesses may not “discourage or prohibit negative reviews, or selectively solicit positive reviews from customers.” And Google lists “merchants requesting that staff solicit a certain number of reviews” as manipulation too. So no review quotas for your front desk. (Google)

The same policy bans offering incentives such as payment, discounts or free goods and services in exchange for a review. That includes the harmless-sounding stuff: a gift card raffle, a discount on the next visit, a free pair of sunglasses.

2. The FTC’s rule

The Federal Trade Commission’s rule on consumer reviews took effect in October 2024. It bans fake reviews, including AI-generated ones, and it bans paying for reviews that express a particular sentiment. It also targets undisclosed reviews from a company’s own officers, managers and employees, and it bans using threats or intimidation to get negative reviews taken down. The FTC can seek civil penalties from businesses that knowingly break it. (FTC)

3. HIPAA

This is the one that bites healthcare. When a patient leaves an angry review, the instinct is to set the record straight. Don’t.

A Dallas dental practice paid $10,000 to settle with federal regulators after it disclosed patients’ health information in its replies to Yelp reviews. (CDA) A California dental practice paid $23,000 after its replies to online reviews revealed patients’ names, treatment and insurance details. The federal Office for Civil Rights put it plainly: “Providers cannot disclose protected health information of their patients when responding to negative online reviews.” (HHS)

Even confirming that the reviewer is your patient can be a disclosure.

What review gating looks like

Review gating is when you filter who gets asked for a public review based on how happy they seem. It sneaks in through tools and habits that look innocent:

• A survey that sends 5-star responders to Google and everyone else to a private form.
• A “Did you love your visit?” text where only “yes” gets the review link.
• A front desk that only hands review cards to patients who seemed pleased.

Private feedback is great. Collect it. Just don’t use it to decide who gets invited to post publicly. Ask everyone the same way.

A review system that plays by the rules

Step 1: Ask every patient, every time

Same request, same timing, for every patient after every visit. No screening. Consistency is what makes it compliant, and it’s also what makes the reviews pile up.

Step 2: Ask in person first

The best moment is checkout, when the visit is fresh. A simple line works: “Would you mind sharing your experience on Google? We’ll text you the link.” People say yes to a person far more often than to an email.

Step 3: Make it one tap

Send your Google Business Profile’s review link by text or email within a few hours of the visit. Text only patients who have agreed to get texts from you. One friendly reminder a few days later, then stop. Keep the message about the visit experience, with no clinical details.

Step 4: No incentives, no quotas

Nothing in exchange for a review. Not a discount, not a raffle entry, not a free product. Don’t give staff review targets either. Thank your team for great service, and the reviews follow.

Step 5: Reply to every review

Respond to good reviews and bad ones within a few days. Patients read your replies to decide how you handle problems, and a calm, kind response to a 1-star review can win more trust than another 5-star review.

How to reply without a HIPAA problem

Three rules cover almost every situation:

• Never confirm the reviewer is a patient.
• Never mention a visit, date, procedure, condition, insurance or bill. Even if the reviewer brought it up first.
• Keep it short and take it offline.

For a positive review:

Thank you for the kind words. Our team works hard to make every visit easy, and comments like this mean a lot to us.

For a negative review:

Thank you for sharing this. We take every concern seriously, but privacy rules keep us from discussing anyone's care online. Please call our office manager at [phone] so we can listen and make it right.

If a review looks fake or written by someone who was never seen at your practice, don’t say “we have no record of you.” That statement is itself information about who is and isn’t a patient. Flag the review through your Google Business Profile, reply with the neutral template and move on.

Where AI fits

AI is great at drafting replies from approved templates and at sending review requests on schedule. It should never invent reviews, and it should never post a reply without a person approving it first. Don’t paste patient details into any AI tool that isn’t covered by a business associate agreement with your practice.

This post is general information, not legal advice. Run your review process past your healthcare attorney or compliance lead.

The bottom line

The practices with the most reviews didn’t find a loophole. They asked every patient, made it easy and answered every review with grace. That’s the whole system, and it works better than any trick.

Next in the series: Patient Recall and Reactivation: The Cheapest Growth You Have.

Not sure how your reviews stack up? Our free site analysis checks your reviews, search visibility and AI search presence, then shows you the three fixes worth making first.

“A false balance is abomination to the LORD: but a just weight is his delight.” (Proverbs 11:1, KJV)