How dental practices get more Google reviews without breaking HIPAA
The checkout ask, the exact text to send, what your practice can and cannot say in a reply, and the review pace that moves a dental office up the map pack.
Most dental offices collect reviews by accident. A patient finishes a big case, feels grateful, and writes something on their own. That happens maybe twice a month, which is why the median practice across 86,875 dental listings has only 39 reviews and 45.6% sit under 25.
The offices at 400 and 600 reviews did not get luckier patients. They ask every patient, at the same moment in the visit, with a process that survives a busy Tuesday. And they do it without ever confirming in public that a specific person is a patient, which is the part most dental marketing advice gets dangerously wrong.
Where the HIPAA line actually sits
A patient can say anything they like about their own care. They own that information. Your practice does not.
The moment your office replies to a review with anything that acknowledges the person as a patient, or mentions a procedure, a visit date, or a clinical detail, you have made a disclosure of protected health information without authorization. Office of Civil Rights settlements over exactly this have run into six figures. A dental practice in Texas paid $10,000 in 2019 for responding to reviews with patient names and treatment details, and the pattern has repeated since.
So the rule for your office is simple and absolute: ask freely, reply generically.
Safe reply: "Thank you for taking the time to leave this. Feedback like yours helps our team. If you would ever like to talk with us directly, please call the office at (555) 555-0100."
Unsafe reply, even though it sounds warm: "So glad your implant healed well, Denise. See you at your six-month recall."
The second one names a patient and a procedure. Do not let a marketing vendor write those on your behalf either, because you are the covered entity, not them.
The one moment that works
The ask belongs at checkout, at the front desk, while the patient is scheduling the next visit. Not in an email that evening, not in a text three days later when the numbness and the goodwill have both worn off.
The front desk says one sentence while handing back the card:
"If today went well, the most helpful thing you could do for us is leave a Google review. I will text you the link right now so you do not have to hunt for us."
Then they send it before the patient reaches the parking lot. That is the entire method. Everything below just keeps it running.
The link and the message
Get the short review URL from the "Ask for reviews" button inside your Google Business Profile, which should already be filled out properly per the profile guide. Save it as a template in whatever your practice management software uses for texting, or in the front desk phone.
"Hi [first name], this is [name] at [practice]. Thanks for coming in today. Here is the direct link to leave us a Google review: [link]. It takes about 30 seconds and it genuinely helps a small office. Thank you."
Keep it under 300 characters. No emoji, no "we would love your feedback." Do not describe the appointment in the message, and never put a procedure name in a text that could be read on a lock screen by someone else.
Pace beats total
Google weighs recency heavily. An office with 300 reviews that has collected four in two years reads as coasting. An office collecting three a week reads as busy and current.
For a single-doctor general practice seeing 25 to 35 patients a day, two to four new reviews a week is achievable and defensible. For a two-doctor office with a hygiene team of three, five to eight.
Track it weekly on a whiteboard in the sterilization area, by front desk person, not by doctor. If one team member generates six reviews a week and another generates zero, the problem is the ask, not the patients. Have the one who is good at it demonstrate it twice at a morning huddle.
If you want to incentivize, pay a small bonus on the number of asks made, never on the number of reviews received. Google's policy bans offering patients anything of value for a review, and paying your team on outcomes quietly pressures them into offering patients something.
What Google prohibits
Google's review policy bans incentives to reviewers, review gating (surveying patients first and only sending the link to the happy ones), and reviews written by staff or family. Any of those can get reviews stripped or the profile suspended, and a suspended profile in a competitive market costs more than every review you would have gained.
Asking every patient, every time, is fully permitted. Sending the link is permitted. One reminder is permitted.
Handling a bad one
Every office doing volume gets a one-star. Reply within 24 hours, in three sentences, calm, and with no clinical detail whatsoever.
"We are sorry to read this. We take every concern seriously and we would like to understand what happened. Please call the office at (555) 555-0100 and ask for our office manager."
That reply does three things: it stays compliant, it shows the next 200 readers that the office is responsive, and it moves the conversation off a public page. Prospective patients read replies far more carefully than they read the complaints. Across the dataset 79.2% of practices already sit at 4.5 or higher, so a clean star average is not what sets you apart. How you answer the bad one is.
Reviews that mention what you want to be found for
Ask the patient to include the specifics they are comfortable sharing: "If you are comfortable saying what you came in for and that we are in Modesto, that helps other people find us."
Never suggest wording, never write it for them. But a nudge is legitimate, and reviews that name a service and a city feed both Google's local ranking and the AI assistants now summarizing businesses. Two hundred reviews saying "great staff" do less for an implant practice than forty that mention implants.
A 90-day plan
- Week 1: pull the review link, build the saved text, write a one-page script, and brief the front desk at a morning huddle.
- Weeks 2 to 4: ask at every checkout. Expect one review per four or five asks at first, improving to one in three as the team gets comfortable.
- Month 2: add a single reminder text at 48 hours to patients who have not left one. One reminder. Never a second.
- Month 3: review the weekly tally by team member, fix the outliers, and add the service-and-city nudge.
A practice starting at 40 reviews and holding three a week clears the 75th percentile for dental practices, which sits at 265 reviews, inside two years. Only 40.3% of dental listings have crossed 100 at all.
Frequently asked
Should we buy review software? Only after the manual ask is working. Automation sends the text; it cannot make the front desk say the sentence, and the sentence is where reviews come from.
Can we put the link on the appointment card? Yes, with a QR code. It converts far worse than the spoken ask but it costs nothing to add.
What about Yelp and Healthgrades? Both matter less than Google for general dentistry, and Yelp actively penalizes asking. Put the effort where patients search, then claim the others and keep the hours accurate.
If you want the whole system built, texts, tracking, huddle scripts and compliant reply handling, it is one of the services in the free 14-day trial. See where your practice sits first in the benchmark report. Text or call (385) 832-6175.