Responding to negative reviews in healthcare: scripts that work, traps that don't
How to respond to a 1- or 2-star review on Google when you're a healthcare practice — without violating HIPAA, escalating the patient, or hurting your ranking.
A negative review on Google in healthcare is uniquely high-stakes. You can't respond the way a restaurant can — HIPAA constrains every word — and an off-key response can make the problem worse than the original review.
Done well, however, a public response actively helps rankings, de-escalates the patient, and reassures prospects reading the review later. Below is what works, what to avoid, and the framework we use at applaud.
Why responding matters at all
Two things happen when you respond publicly:
- Search prospects read it. BrightLocal's 2024 survey put the share of consumers who read business responses to reviews at 89%. For healthcare specifically, response posture often weighs more than the original review.
- Google measures response activity as an engagement signal. Practices that respond to most reviews — positive and negative — measurably out-rank practices that respond to none. Moz Local Search Ranking Factors has flagged this since at least 2022.
The right response stays compliant, lowers the temperature, and gives future readers a reason to still pick you.
The HIPAA constraint, in plain language
You cannot confirm in a public response that the reviewer was a patient, that you treated them, or that any specific event described in the review occurred. Doing so is a public disclosure of PHI. HHS Office for Civil Rights (OCR) has fined practices for this — see the 2022 enforcement actions list, which includes several review-response violations.
What this means in practice: you cannot write “We're sorry your root canal wasn't comfortable.” You can write “We're sorry to hear about your experience.”
The framework: Acknowledge → Empathize → Move private
A clean negative-review response has three beats:
- Acknowledge the post.Without confirming or denying anything specific. “Thank you for taking the time to share your experience.”
- Empathize generically. “We're sorry to hear that your experience didn't meet your expectations.”
- Move the conversation private. Direct them to a real human contact at the practice — practice manager, email, phone. Do not name them. Do not describe the visit.
A template that works
Thank you for sharing your experience. Patient feedback is important to us, and we're sorry to hear that your visit didn't meet your expectations. We'd welcome the chance to discuss it directly — please reach out to our practice manager at [email] or [phone], and we'll make sure your concerns are heard. Thank you.
That response works for almost any negative review without touching PHI. Vary the language post to post so it doesn't look like a script.
Traps to avoid
- Don't confirm the reviewer was a patient. Even a generic “Thank you for being a patient of ours” is a disclosure.
- Don't describe the visit.Even non-clinical detail (“we're sorry the wait was long”) confirms the reviewer was there.
- Don't argue the facts.Even when the reviewer is wrong. Future readers don't care who's right — they care how you handled it.
- Don't copy-paste the same response. Google's spam detection penalizes templated responses after roughly the third identical one.
- Don't respond when angry. Wait until the next morning. The decision-maker should not be the person whose visit went sideways.
- Don't ask for the review to be removed in the public response. Even if you have grounds to flag it to Google, do that separately and don't mention it publicly.
When (and how) to flag a review to Google
Google's policy permits removal of reviews that:
- Aren't from a real patient (competitor sabotage).
- Contain prohibited content (slurs, threats, doxxing).
- Identify the reviewer's clinical details in a way that would itself violate HIPAA if reposted.
- Are about a different business.
Reviews that are simply unfavorable but truthfulwill not be removed. Don't waste credibility flagging those — respond properly instead.
The bigger play: route before public
The most effective approach to negative reviews isn't how you respond — it's how rarely they get posted at all. A well-structured outreach motion catches softer sentiment beforeit becomes a public one-star and routes it to a private inbox the practice manager actually owns. That's the bigger lever. (See our take in the 50% review conversion benchmark.)
Want this kind of thinking applied to your practice?
Twenty minutes with us. We'll audit your current review velocity and tell you honestly whether applaud fits.
