How Therapists Should Respond to Online Reviews

How Therapists Should Respond to Online Reviews (Without Confirming a Client) Therapists should reply to reviews, when they reply at all, in language that never confirms or denies that the reviewer is or was a client — not even in a glowing review, and not even to correct an inaccurate claim in a negative one. The safest replies read as general statements about the practice's approach to feedback and stay just as true if the reviewer had never been a client at all. That one rule drives every decision in this article, so it's worth stating before anything else: confirming a treatment relationship is itself a disclosure, separate from whatever clinical detail might follow it. Getting reply drafts that never confirm a client relationship right means building that discipline into the practice's default response, not relying on whoever's logged into the Google Business Profile that day to remember it under pressure. Why "just be honest" doesn't work here The standard small-business advice for handling a negative review — acknowledge what happened, apologize if warranted, explain what's being done about it — assumes the business is free to discuss the specifics of the interaction. A therapy practice isn't, which means almost every piece of generic review-response advice needs to be filtered through one question before it's used: does this reply confirm, even indirectly, that the reviewer has a relationship with the practice? If the answer is yes, the advice doesn't apply here no matter how reasonable it sounds in a general small-business context. Option one: don't respond For a practice with very low review volume, simply not responding to most reviews is a defensible default — a non-reply never discloses anything. This is less viable once a practice has enough volume that an unanswered string of reviews, especially negative ones, starts to look like the practice doesn't engage with feedback at all. A middle ground many practices land on is responding to none individually but linking a general review policy from the profile itself — see therapist review policy: a template for your website and profiles for what that policy can say. Option two: a neutral policy statement A short, reusable statement that makes no reference to the specific review's content works for almost any situation: something like "Thank you for taking the time to share feedback. Because of our confidentiality obligations, we're not able to discuss any specific client matters in a public forum. If you'd like to speak with us directly, please contact our office at [phone/email]." That same sentence works whether the underlying review is positive, negative, accurate, or entirely mistaken, which is exactly the point — a reply that has to be customized to the review's content is a reply that risks confirming something. Option three: inviting contact through the office For reviews that raise something a practice genuinely wants to resolve — a billing question, a scheduling complaint, a misunderstanding about a policy — the public reply should do nothing more than redirect to a private channel. "Please reach out to our office directly so we can look into this" accomplishes that without acknowledging anything about who the person is or what happened. This holds even when the review describes a specific incident, names a clinician, or makes a claim the practice believes is inaccurate or unfair — the public reply stays procedural regardless, and any correction or disagreement happens off the public record, if at all. The HIPAA risk in any reply Most licensed therapists in private practice who bill electronically, including for insurance claims, are HIPAA covered entities, which makes this a live legal risk and not just an ethical preference. A reply doesn't need to mention a diagnosis or a treatment detail to create exposure — simply replying in a way that only makes sense if the person were a client (anything resembling "we're sorry your experience with us fell short" or "we appreciate you coming in") discloses the existence of the relationship itself, which is protected health information. HIPAA-compliant review responses covers this same principle for healthcare practices broadly, and the reasoning transfers directly to mental health settings. Several professional ethics codes layer additional confidentiality obligations on top of HIPAA, which is covered in can therapists ask clients for reviews. The Manasa Health Center case (verify before publishing) HHS's Office for Civil Rights has pursued enforcement actions against healthcare practices over protected health information disclosed in public review responses, reportedly including a case involving a provider's social media replies to patient reviews. The exact name, year and settlement figure for any specific case shouldn't be stated as fact without checking a primary OCR source directly, since details like this are easy to misremember or conflate between cases. What's consistent across these enforcement actions, regardless of the specific case, is the underlying pattern: a reply confirmed enough about the relationship to count as a disclosure, even when the staff member responding meant well. The practical takeaway for a mental health practice: assume any reply that references the content of a review, however indirectly, carries risk, and default to the neutral language in option two above. For the broader context of how to monitor and manage reviews across platforms without drifting into solicitation, see therapist reputation management: an ethics-first guide, and for general-purpose guidance that applies outside this industry too, see how to respond to negative reviews. What about a glowing five-star review? It's tempting to treat a positive review as safe ground for a warmer, more personal reply, but the privacy math doesn't change based on how the review makes the practice look. "So glad we could help you through this" confirms a relationship exactly as much as a defensive reply to a negative review does — arguably more clearly, since it reads as an uncomplicated acknowledgment rather than something that could be read as hypothetical. The same neutral policy language from option two applies regardless of whether the underlying review is glowing or scathing. Reply templates for specific situations For a review mentioning a specific incident or outcome: "Thank you for sharing this. We take all feedback about our practice seriously, and because of confidentiality obligations we're not able to discuss any specific client matter publicly. Please contact our office directly at [phone/email] if you'd like to discuss this further." Note what this reply does not do: it doesn't acknowledge whether the incident described happened, doesn't dispute any detail, and doesn't reference the reviewer's relationship to the practice at all — it would read identically in response to a review from someone who was never a client. For a review describing a billing dispute: "We understand billing concerns can be frustrating. Our office is glad to review any billing question directly — please reach out at [phone/email]." This avoids confirming whether the reviewer has an account with the practice, whether a balance exists, or any detail about insurance or payment arrangements, which is the same discipline HIPAA-compliant review responses recommends for billing-related reviews in healthcare generally. For a review the practice believes is entirely inaccurate — posted by someone who was never a client, or describing something that didn't happen: the instinct to correct the record publicly is understandable but risky, since any correction specific enough to be convincing is often specific enough to disclose something. The safer path is the platform's reporting process, covered in therapist reputation management, rather than a public rebuttal — even an inaccurate review doesn't license the practice to say more than its standard policy statement allows. What about reviews on Yelp specifically? Yelp's own policy prohibits businesses from soliciting reviews, which applies to every industry — but for a therapy practice, Yelp is worth treating as monitor-and-respond-only for an additional reason beyond that platform rule: Yelp reviews for mental health providers are relatively uncommon compared to Google or Psychology Today, and a practice that notices one appear should apply the same neutral reply discipline covered above rather than treating Yelp as different because it's less familiar territory. Building this into a group practice's workflow A solo practitioner can hold this discipline in their own head; a group practice with multiple clinicians and a front-desk team needs it written down and trained, since the risk of an off-script reply rises with every additional person who has access to the practice's Google Business Profile or social accounts. Whoever has posting access should be working from the same written policy and the same short list of approved reply language, with anything outside that list routed to a practice owner or office manager before it goes live — see therapist review policy: a template for your website and profiles for the written version of this. Frequently asked questions Is it ever safe to "like" or react to a review instead of replying with text? On platforms where a reaction is visible to other users, treat it the same as a written reply for this purpose — a reaction still signals engagement with a specific review, and depending on the platform's display, may still imply something about the relationship. When in doubt, don't react; use the standard written policy statement instead. Should every clinician in a group practice have their own reply voice, or should replies always come from "the practice"? Replying as the practice as a whole, rather than as an individual clinician, is generally the more conservative choice, since it avoids tying any specific reply — and therefore any specific confirmation risk — to one named clinician's account or voice. Can a practice edit or delete its own reply after posting it? Most platforms allow a business to edit or remove its own reply, which is worth doing immediately if a reply ever goes out that doesn't match the practice's policy — an imperfect reply left up out of embarrassment compounds the original risk rather than limiting it. None of this is legal advice — confirm your obligations with your own counsel and your professional association before adopting a reply policy. Every review, mention and AI answer in one place → Try Tailwind free. Tailwind runs $5 a month per tool, or $50 a month for the Full plan covering everything, with the first month free and no card required to start.