Google reviews for dental and medical clinics: how to reply, remove and collect without a GDPR problem

Clinics get fewer reviews than restaurants and each one weighs more. A single one-star from a nervous patient sits on top of a profile with forty reviews for months. At the same time, a clinic cannot reply the way a café can: confirming that a person was treated, or mentioning anything about the treatment, is medical data, and publishing it is a breach of the GDPR and of professional secrecy in most EU countries.

Here is how to handle all three parts of the job without crossing that line.

Replying: the rule and the formula

The rule: never confirm in public that the reviewer was a patient, never mention a diagnosis, a procedure, a date or a price from their file. Even "we are sorry your root canal was uncomfortable" confirms a treatment. The fact that the patient disclosed it first does not give the clinic permission to do the same.

The formula that works within that rule:

Thank you for your message. We take what you describe seriously and would like to understand what happened. Please contact our patient coordinator directly at [email] or [phone] so we can look into it with you. Dr Martínez, clinical director.

Three sentences. It reads to future patients as calm and responsible, and it says nothing about this person's care. If the review contains a factual claim you need to counter ("they charged me twice the quoted price"), do it in general terms: "Every patient receives a written treatment plan with prices before treatment begins, and we invoice only what is on it."

For positive reviews, the same care: "Thank you for the kind words, it means a lot to the whole team" is fine. "Glad your implants are settling well" is not.

Removing: what applies specifically to clinics

Beyond the usual categories (fake, conflict of interest, off-topic), clinics regularly see three kinds of reviews that can be reported:

• Reviews naming staff with accusations. "Dr X is incompetent and should lose her licence" together with a name is often removable under Google's personal information and harassment rules, and the named clinician has their own GDPR erasure right.
• Reviews about a different clinic. Clinics with similar names in the same city get each other's reviews constantly. Report as off-topic, with the evidence (the review mentions a service you do not offer, or a doctor you do not employ).
• Reviews from people who were refused treatment or an appointment. Not a customer experience in Google's sense. Reportable as off-topic; results vary, worth one attempt.

What cannot be removed: a real patient's real disappointment, however unfair. For those, the reply above, and more fresh reviews, are the only answer. Our general guide on removal covers the reporting process.

Collecting: how to ask in a clinic

Patients do leave reviews when asked, and the moment is the reception after the appointment, when the relief is fresh. What works:

• A small card handed over with the invoice or the next appointment slip: "How was your visit? Scan to tell us. Your review helps other patients find us."
• A short text message within an hour: "Thank you for visiting [Clinic] today. If you have a minute, a Google review helps us: [link]. If anything was not right, reply here and we will call you."
• The receptionist mentions it. One sentence, once.

What you must not do: offer a discount on the next cleaning for a review, ask only the patients who seemed happy, or have staff write them. All three break Google's policy and, since the EU consumer-law changes of 2022, are unfair commercial practices.

Data protection for the ask itself: a text message asking for a review is a legitimate follow-up to a visit in most readings of the GDPR and the ePrivacy rules, but keep it to one message, let the patient opt out, and do not include anything about the treatment in it. Check with your national dental or medical association; some have published guidance for their members.

The private channel is more important for clinics

Patients with a complaint often do not want to write it publicly at all. A feedback page that lets them rate the visit and, on a low score, write to the clinic manager with a callback number catches most of the complaints that would otherwise become reviews. Nothing in that message is published; it goes straight to the clinic. For a clinic this is also a quality-management record, which some national frameworks require anyway.

What a clinic profile should look like

Beyond reviews, the profile fields that patients actually check:

• Primary category precise: "Dental clinic", "Orthodontist", "Dermatologist", not "Medical centre".
• Services listed individually with a one-line description; people search for "invisible braces", not for your clinic name.
• Doctors listed with photos, if your national rules allow it.
• Hours correct, with emergency contact information if you offer it.
• Insurance and payment attributes filled in.

A clinic at 4.0 with 60 reviews and complete services beats a 4.6 with 12 reviews and nothing filled in, both in the map and in the patient's decision.

Summary

Reply to everything, confirm nothing. Report the reviews that name people or belong to someone else. Ask every patient, at the desk, with one tap. Give them a private door first. If you would like us to go through your profile and tell you which reviews are reportable and how your pace compares with the clinics around you, that is what our free audit is for.