Reviews · 9 min read
Blog · Healthcare
Clinic Reputation: Reviews That Do Not Breach Patient Confidentiality
30 September 2026 · 10 min read
In healthcare a review carries more weight than almost anywhere else, and the room to manoeuvre is narrower than almost anywhere else. A patient reads reviews more carefully than they would before buying a car — and every word of your public reply runs into medical confidentiality.
Why a review costs more in healthcare
Choosing a clinic is a decision with a high cost of error, and people compensate for uncertainty by reading. They do not stop at the average score: they open the negative reviews specifically and read them in full, together with your replies.
For most businesses a rating is a filter. In healthcare it is reading material. The practical consequence is that the reply matters more than the score. A patient will forgive a 4.3 clinic that answers like a human being, and will not forgive a 4.8 clinic whose single one-star review sits there in silence.
The line you cannot cross
This is where healthcare differs from every other niche. Information about seeking medical care, about a person’s health, diagnosis and treatment is protected: in Ukraine by Article 40 of the Fundamentals of Healthcare Legislation and Article 286 of the Civil Code. For patients in the EU, the GDPR adds its own layer, treating health data as a special category.
From which follows the thing that gets breached daily: by publicly confirming that the author of a review was your patient, you have already disclosed what must not be disclosed. Even if they said it first. Even if you are defending yourself. Even if the review is dishonest and you badly want to say the person actually came in for something else.
I am not a lawyer and I do not give legal assessments — a finished response policy should be shown to yours. But the working rule I hold to is simple: a public reply contains nothing that confirms the person was ever there.
How to reply: the wording
| Do not write this | Write this instead |
|---|---|
| “Ms Brown, you came in on 14 March for a consultation with Dr K.” | “Thank you for writing. Your account matters to us.” |
| “In your case that outcome is expected with this diagnosis.” | “Every situation is individual, and we cannot discuss details in public.” |
| “You never paid for the second stage, which is why treatment is unfinished.” | “Please contact us on … and we will go through it with you personally.” |
| “This review was not left by a patient of ours.” | “We were unable to match this account to our practice. Please write to …” |
The last row is the subtlest. Even a denial — “you are not our patient” — is a public statement about a named individual’s status. Wording that asserts nothing does the same job and risks nothing.
The rest is as in any other niche: acknowledge, offer a concrete action, move the conversation to a private channel. The general shape of a reply is covered in my piece on negative Google reviews.
Collecting reviews
The only durable way to lift a rating is a flow of genuine new reviews. In healthcare it has to be built more carefully than elsewhere.
- Timing. Not on the day of the procedure, while the person is still tense, and not a month later, once they have forgotten. Best after a follow-up appointment or a check-in call
- Channel. A short message with a direct link to the form. Every extra step costs you a share of the responses
- Who asks. The front desk, not the doctor: a request from the treating clinician puts the patient in a position that is awkward to decline
- Wording. “If you have a minute, tell others about your experience” works. “We would appreciate five stars” does not, and breaks the rules
- Platforms. Not only Google. Directories, maps and sector listings — whatever ranks for “clinic name reviews”
One more thing about data: do not upload a patient list into a third-party mailing service without consent. That is a separate story, and a more expensive one than reputation.
Three practices that backfire
- Gating by mood. Asking “did you enjoy your visit?” and showing the Google link only to those who said yes. A direct policy breach that can cost you every review at once
- Incentives. A discount or a gift for a review. The same breach, plus an ethics question that is sharper in healthcare than anywhere
- Reviews from staff. The most visible thing on a profile and the fastest way to lose trust: employee accounts are matched in a minute
The clinic profile and the doctor’s profile
Patients search in two different ways: “clinic plus procedure” and “doctor’s surname”. Those are two queries, two result pages and two separate jobs.
The clinic’s profile rests on the Google listing, the website and aggregators. The doctor’s rests on publications, talks, media mentions and professional directories — and, with enough recognition, on a knowledge panel. The second gives a clinic what the first cannot: when someone checks a specific clinician and finds a professional rather than a line in a staff list, the decision comes faster.
I do this outside healthcare too — the mechanics are described under personal reputation.
What AI answers change
More and more often a patient does not open ten tabs but asks an assistant which clinic is better for a given procedure. The answer is assembled from what the model found, and it contains no star rating — it contains a retelling.
In practice that means the score matters less than the text: what words describe the experience in your reviews, what your site says about specific procedures, whether structured data is in place, whether the name, address and phone number match across platforms. A clinic at 4.4 with substantive reviews turns up in that answer more often than a clinic at 4.9 with three lines of “all good”.
Timelines
- setting up collection and a response policy: 2–4 weeks
- first visible change in the mix of reviews: 2–3 months
- a change in the average score: depends on patient flow
- the composition of the first page for the clinic name: 4–8 months
And the caveat I opened with: everything here is reputation practice, not legal advice. The exact wording for your clinic should be signed off by your lawyer.
Questions I get asked most
Can a patient’s negative review be removed?
Only on the ordinary platform grounds: fakes, conflict of interest, insults, personal data. The fact that a review concerns medical care confers no additional right to removal.
Is the patient’s consent needed to reply publicly?
If the reply confirms nothing about their attendance and contains no treatment detail, nothing is being disclosed and consent is not the issue. The moment specifics appear in the reply, that changes.
Can we ask for a review right after the appointment?
Technically yes, but the result is worse. The person is still in the emotion of the day, and in healthcare that emotion is rarely balanced. Asking after a follow-up yields both a higher response rate and more substantive text.
Can we reply in the doctor’s name?
Yes, provided the doctor actually sees the text before it is published. A clinician’s signature under wording written by a marketer becomes its own problem sooner or later.
Facing something similar?
If this concerns a specific brand, write to me — I will look at your first page of results and tell you what can realistically be done about it. Contact.
Written by Vyacheslav Pysanka, Head of ORM (SERM SEO AI-SERM) Department at Netpeak Ukraine.
More articles
Crisis · 9 min read