Last updated · reviewed by the Essentras editorial team
Guide for physicians and practices
The short answer
Reputation management for doctors means managing reviews on Google, Healthgrades, Vitals, Zocdoc and Yelp, plus what ranks for your name, without breaking patient privacy. Reply in general terms that never confirm the reviewer was your patient: HHS has settled with and fined practices whose replies disclosed patient information. Report reviews that break a platform’s rules; genuine ones stay.
Below: the 4 HHS enforcement actions over review replies, the review rules of 5 platforms read on their own pages, reply templates, a free check for draft replies, and what review and search work costs for a practice.
Written and checked by the Essentras Editorial Team
General information, not legal or medical advice. Have your privacy officer or healthcare counsel approve your reply policy. Disclosure: Essentras sells review removal, Knowledge Panels and press placements.
Key facts
HIPAA and review replies
The HHS Office for Civil Rights (OCR) enforces the HIPAA Privacy Rule. These are the actions we found on HHS’s own pages where the disclosure was made in a reply to an online review. Each line links to HHS.
| Date | Practice | Where | What the replies disclosed, per HHS | Outcome |
|---|---|---|---|---|
| 5 Jun 2023 | Psychiatry practice, New Jersey | Google Reviews | A reply to a patient’s negative review included information about the patient’s diagnosis and mental health treatment. HHS found disclosures of 3 other patients’ information in replies to their reviews. | $30,000 settlement. 2-year corrective action plan: written policies, workforce training, breach notices to the patients and a breach report to HHS.HHS page |
| 14 Dec 2022 | Dental practice, California | Yelp | The complaint said replies gave full names where patients had used Yelp nicknames, plus details of visits and insurance. HHS confirmed replies that compromised patient information. | $23,000 settlement. 2-year corrective action plan: remove posts with patient information, written social media policies, training and breach notices.HHS page |
| 28 Mar 2022 | Dental practice, North Carolina | A webpage replying to a negative online review | A patient’s protected health information. | $50,000 civil money penalty. The practice did not respond to OCR’s data request or subpoena and did not contest the findings.HHS page |
| 2 Oct 2019 | Dental practice, Dallas, Texas | Yelp | A reply disclosed a patient’s last name and details of the patient’s health condition. HHS found disclosures of other patients’ information in replies on the same review page. | $10,000 settlement, reduced for the practice’s size, finances and cooperation. 2-year corrective action plan with OCR monitoring.HHS page |
Scroll sideways for every column.
Social media is not the place for providers to discuss a patient’s care.
Simply put, this is not allowed.
The 2022 and 2023 resolution agreements state that they are not admissions of liability. HHS may adjust HIPAA penalty amounts for inflation each year (45 CFR 102.3).
Our reading, to confirm with your counsel: a reply that confirms someone was treated, or repeats any detail of their care, can disclose protected health information, even when the patient posted the details first. A public review is not a written authorization.
How to reply
6 rules, each tied to its source, then templates that confirm nothing and a free check for your own drafts.
01Never confirm that the person is or was a patient
Protected health information includes information about the health care provided to an identifiable person. Confirming treatment can be enough.
Basis: HHS, Summary of the HIPAA Privacy Rule
02Never mention a detail of care
No visits, dates, diagnoses, treatment, test results, prescriptions, insurance or bills. The HHS cases above involved names, health conditions, diagnoses, treatment, visits and insurance.
Basis: HHS enforcement actions, 2019 to 2023
03Do not repeat what the patient posted
A disclosure is allowed only where the Privacy Rule permits it or the patient authorizes it in writing. A public review is not a written authorization.
Basis: HHS, Summary of the HIPAA Privacy Rule
04Say something general, then move the conversation offline
State your practice’s standards in 1 or 2 sentences and give a phone number or email answered by a named role.
Basis: Our recommendation
05Never accuse the reviewer in public
A knowingly false public accusation, or a groundless legal threat, used to get a review removed is review suppression under the FTC rule. If a review breaks a platform’s rules, report it instead.
Basis: 16 CFR 465.7
06Let 1 trained person approve every reply
The corrective action plans in the 2022 and 2023 settlements required written policies on posting patient information, and workforce training.
Basis: HHS resolution agreements
A starting point only. Have your privacy officer or counsel approve the versions you use, and fill in the [brackets].
Thank you for taking the time to write this. We want everyone who contacts our practice to be treated with care and respect, and we take every concern seriously. Privacy rules prevent us from discussing anyone’s care online. Please call our practice manager at [phone] so we can listen.
We are sorry to read this. We want appointments to run on time and bills to be clear, and feedback like this helps us improve. We cannot discuss any individual’s account here. Our office manager is available at [phone] or [email].
We are sorry to hear this. We cannot discuss anyone’s care in a public forum, and we take every concern about care seriously. Please contact our [role] at [phone] so the right person can follow up privately.
Thank you for the kind words. We will share them with our team.
If you believe a review is fake
Do not reply with details or accusations. Report it to the platform with your evidence. If you reply at all, use the first template unchanged, and never say in public whether the person was a patient.
Free check
Paste a draft reply. The check runs only in your browser and sends and stores nothing. It flags phrases that confirm a patient relationship or describe care, the patterns behind the HHS cases above. It cannot tell you that a reply is compliant.
5 platforms
Each platform’s rules, from its own pages. None of the 5 lists being negative as a reason to remove a review.
| Platform | Can you reply in public? |
|---|---|
| Yes, after Google’s policy check | |
| Healthgrades | Not stated on the pages we could read |
| Vitals | Not stated on the pages we read |
| Zocdoc | No |
| Yelp | Yes, in public or by direct message |
Source: Google Maps content policy and Business Profile Help, read 16 Oct 2026
Source: Yelp Content Guidelines, Business Help Center and developer policies, read 16 Oct 2026
What can come down
Not sure which reviews can be removed?
Send the review links. We check each one against the platform’s rules for free and tell you which can be reported, before you pay anything.
Beyond reviews
Vitals lists every actively licensed physician in the US, and physicians may not decline a listing. Claim your profiles so the photo, address and details are right.
Vitals FAQLawful reporting and public records usually stay online. The route is accurate pages that rank above them, not removal.
How to push down negative search resultsGoogle’s personal information policy and its Results about you tool can remove these from search results, free.
Remove personal information from GoogleGoogle decides whether one appears. Essentras charges $650 for a physician and $1,200 for a practice, refunded if the panel does not go live.
How to get a Google Knowledge PanelCheck what AI assistants say about you and the practice. The Essentras AI Visibility Tracker is free for 3 questions a month, or $49 a month for Pro.
Check what AI says about youWhat it costs
None of the 9 reputation vendors we checked publishes a price for clinics. Here is what each line costs, then 3 practice budgets computed by the same estimator as the rest of this page.
3 Google reviews that break Google’s policies, for example from people who were never patients. Nothing else.
| Google review removal1 × 3-review bundle ($1,350). $450 per reviewEssentras list price, checked 15 Oct 2026 | $1,350 |
|---|---|
| One-time total | $1,350 |
The 3-review price is $1,350; 3 single reviews would cost $1,497. If Google keeps a review, that review’s share is refunded.
Open in the estimator3 policy-breaking Google reviews, 1 lawful result to outrank with 3 placements on DA 50+ outlets, and a person Knowledge Panel.
| Google review removal1 × 3-review bundle ($1,350). $450 per reviewEssentras list price, checked 15 Oct 2026 | $1,350 |
|---|---|
| Google Knowledge PanelPerson panel ($650)Essentras list price, checked 15 Oct 2026 | $650 |
| Press placements to push results down3 × $803 to $4,644 per placement (median $2,167), 3,457 matching outletsEssentras catalog, 14 Oct 2026 | $2,409 to $13,932 |
| One-time total | $4,409 to $15,932 |
3 placements list at $2,409 to $13,932 between the 25th and 75th percentile. Nobody can promise where they will rank, and Google decides whether a panel appears.
Open in the estimator10 policy-breaking Google reviews across the locations, and review software to compare.
| Google review removal1 × 10-review bundle ($3,500). $350 per reviewEssentras list price, checked 15 Oct 2026 | $3,500 |
|---|---|
| One-time total | $3,500 |
Review software for 5 locations lists at $4,800 to $9,000 a year on Reputation.com’s published tiers. Software manages and requests reviews; removal still goes through each platform.
Open in the estimatorFree estimator
This is the estimator from our reputation management cost guide, loaded with the doctor example: 3 Google reviews that break Google’s policies, 1 result to outrank with 3 placements on DA 50+ outlets, and a person Knowledge Panel. Change any input; no email needed.
| Item | Cost |
|---|---|
Google review removal1 × 3-review bundle ($1,350). $450 per reviewEssentras list price, checked 15 Oct 2026
| $1,350 |
Google Knowledge PanelPerson panel ($650)Essentras list price, checked 15 Oct 2026
| $650 |
Press placements to push results down3 × $803 to $4,644 per placement (median $2,167), 3,457 matching outletsEssentras catalog, 14 Oct 2026
| $2,409 to $13,932 |
Monthly prices × 12, so a one-time bill and a retainer can be compared. Verify at the source before you buy.
Turn this into a fixed price
Send the links. We tell you for free which items can be removed, which can only be pushed down, and what each costs, before you pay anything.
What this estimate does not cover
| Item | Price | Unit | Buy page |
|---|---|---|---|
| Google review removal | $499 | 1 review | /remove-reviews |
| Google review removal | $1,350 | 3 reviews ($450 each) | /remove-reviews |
| Google review removal | $2,000 | 5 reviews ($400 each) | /remove-reviews |
| Google review removal | $3,500 | 10 reviews ($350 each) | /remove-reviews |
| Remove your name from Google | $1,650 | Flat fee per name | /services/remove-name-google-search |
| Remove 1 specific article | $2,200 | Flat fee per article | /services/remove-article-from-google |
| Reddit content removal | $1,250 | Flat fee per case | /services/reddit-content-removal |
| Google Knowledge Panel, person | $650 | Per panel | /services/google-knowledge-panel |
| Google Knowledge Panel, business | $1,200 | Per panel | /services/google-knowledge-panel |
| Google Knowledge Panels, both | $1,395 | 2 panels (list $1,850) | /services/google-knowledge-panel |
| Wikipedia page | $4,000 | Flat fee, refunded if not published | /services/wikipedia-page-creation |
| AI Visibility Tracker Pro | $49 | Per month (free plan: $0) | /ai-tracker |
Checked 15 Oct 2026 on the buy pages. No removal, no fee: a removal that does not happen is refunded in full.
Front desk policy
The HHS corrective action plans show what regulators expect after a disclosure. Most of it costs nothing to put in place before one.
Write a review and social media policy: who may reply, what a reply may never contain, and who approves it.
Basis: Required in the 2022 and 2023 HHS corrective action plans
Train everyone who handles reviews, owners and managers included, and review the training at least once a year.
Basis: HHS corrective action plans, 2022 and 2023
Ask every patient for reviews the same way, or ask no one, and follow each platform’s rule.
Basis: Google content policy; FTC rule Q&A; Yelp guidelines
Never offer anything for a review, or for changing or removing one.
Basis: Google content policy; FTC rule Q&A
Keep no-review clauses out of intake forms and patient agreements.
Basis: Consumer Review Fairness Act, FTC guidance
Answer the phone number you put in replies, and log every reply and every report you file.
Basis: Our recommendation
If patient information was ever posted in a reply, ask your privacy officer about breach obligations at once.
Basis: HHS corrective action plans required breach notices
FAQ
Yes, if the reply discloses nothing about the patient. Do not confirm the person was treated, and do not mention visits, diagnoses, treatment, insurance or bills, even if the patient posted them. HHS has settled with and fined practices whose replies disclosed patient information. Have your privacy officer approve a written reply policy.
Only if it breaks the platform’s rules, for example a fake or conflict-of-interest review, threats, harassment or personal information. The platform decides. None of Google, Healthgrades, Vitals, Zocdoc or Yelp lists being negative as a reason to remove a review, and Healthgrades says doctors cannot pay to remove one.
HHS’s Office for Civil Rights can investigate. In the actions we found, practices paid $10,000 (2019), $23,000 (2022) and $30,000 (2023) in settlements with 2-year corrective action plans, and a dental practice received a $50,000 civil money penalty (2022) after not responding to OCR. The 2022 and 2023 plans required breach notices to patients.
It depends on the platform. Google bars discouraging negative reviews and asking only for positive ones, and the FTC says asking only happy customers could violate the FTC Act. Yelp says businesses should never ask for reviews. Zocdoc asks its own patients after each visit and lets practices with fewer than 30 reviews request more. Never offer anything in return.
No. The Consumer Review Fairness Act makes it illegal to use form contract terms that threaten or penalize people for posting honest reviews, and the FTC and state attorneys general enforce it. On your own website, you may remove reviews that contain confidential or private information, such as medical details.
That is a question for a lawyer where you practice. Under the FTC’s rule, a groundless legal threat or a knowingly false public accusation used to get a review removed is review suppression. For scale, Minc Law publishes $5,000 to $10,000 for a removal matter without a lawsuit and $20,000 to $60,000+ with one.
Vitals says it lists every actively licensed physician in the US and that physicians may not decline a listing; you can claim the profile to correct it. We could not read a Healthgrades statement on removing a profile, so ask Healthgrades directly.
Usually not under the platforms’ rules. Google allows the names of public-facing professionals who work under their own names, and Yelp allows the full names of doctors and other professionals commonly known by name. Reviews that expose someone’s private details, such as a home address, can be reported.
No platform we checked requires it, and Zocdoc does not allow replies at all. On Google, replies are public and checked against Google’s policies before they post. A short, general reply that invites a private conversation is usually enough.
None of the 9 vendors we checked publishes a clinic price. Essentras lists Google review removal at $499 for 1 or $1,350 for 3, a physician Knowledge Panel at $650 and placements from $752 at the 25th percentile. Reputation.com’s review software lists at $80 to $150 per location a month (checked 15 Oct 2026).
Report it to the platform with your evidence instead of arguing in public. Zocdoc takes disputes about people who did not attend within 1 year of a review’s approval. Do not say in public whether the person was a patient, and remember that a knowingly false public accusation used to get a review removed is review suppression under the FTC rule.
No. The platform decides every removal. What a company can guarantee is money: Essentras refunds a review’s share if Google does not remove it. Treat a promise of removal as a red flag.
Each source with the date it carries and the date we read it. Rules change: verify at the source.
We check what can be removed first and price the rest item by item, with the refund terms in writing.
General information, not legal or medical advice. HIPAA questions belong with your privacy officer or healthcare counsel. Essentras is not a law firm. Prices are list prices on the date shown. Nobody can promise that a platform, Google or a court will remove content.
Adds us as a preferred source, so our guides surface for you in Search and AI answers. One click, and you can undo it any time.
Free tool · Authority Audit
Before you fix one piece, see the whole picture. A free Authority Audit scores your presence across Google, AI, Wikipedia, reviews, and press, and shows you exactly where to start.