How to Remove a Privacy-Violating Patient Review

Healthcare reviews are a special case for one reason: the practice cannot defend itself the way other businesses can. HIPAA restricts you from confirming that the reviewer was even a patient, let alone correcting their account of treatment. A reply that would be routine for a restaurant can be a reportable privacy violation for a dental office. That asymmetry is exactly why removal, where the review qualifies, matters more in this vertical.

Which patient reviews cross Google's lines

• Reviews exposing other people's information. A review naming another patient, describing someone else's condition, or posting photos from inside the practice that identify others violates Google's privacy policies.
• Personal attacks on identified staff. Harassment aimed at a named hygienist, nurse, or front-desk employee falls under the harassment policies rather than fair criticism of the practice.
• Reviews from people who were never patients. Family members venting, ex-employees, or strangers. The conflict-of-interest and authenticity rules apply to healthcare like anywhere else.
• Off-topic or wrong-practice reviews. Common with multi-location groups and similarly named clinics.

Can you respond without violating HIPAA?

Only in the most general terms, and many practices reasonably choose not to respond at all. You cannot confirm the person was a patient, mention any visit, or discuss treatment, even if the reviewer already did. A safe reply speaks about practice policy in the abstract. Because the reviewer faces no such restriction, responding is often a losing exchange, which is why the removable cases are worth pursuing first.

How removal works for practices

The case is documented and submitted through Google's official process, and Google makes the final call. No patient records are shared with anyone in that process, and nothing about it requires access to your Google account. A review that has sat on the profile for months is as workable as a fresh one.