How Allied Health Clinics Should Handle a Negative Google Review (Without Breaching Patient Privacy)

10 August 2026·6 min read

Quick answer: When a negative Google review names your clinic, the golden rule is simple: never confirm, deny, or discuss whether the reviewer was ever a patient — even if they've already revealed personal health details themselves. Reply with a short, professional message that acknowledges the feedback, states your commitment to patient confidentiality, and invites them to contact the practice directly. Anything more specific said in public is a privacy breach waiting to happen, no matter how unfair the review feels. ✨

Every clinic gets one eventually — a scathing one-star review, sometimes fair, sometimes wildly exaggerated, occasionally written by someone who's confused you with the clinic down the road. The instinct is to set the record straight. Don't. The moment you write "Sarah was seen on the 4th of March for her lower back and we followed the agreed treatment plan," you've disclosed that Sarah is a patient, when she was seen, and what for — in a public, permanently indexed comment. That's a confidentiality breach, and it doesn't matter that Sarah brought it up first. This post gives you a reply framework that protects patients, protects your registration, and still reads like a clinic that genuinely cares. 💖

What most allied health clinics get wrong

The mistake isn't malice — it's panic. A practitioner or front-desk staff member sees an unfair review, feels the sting personally, and responds the way they would to a friend: with context, explanation, sometimes a full timeline of the appointment. Three things go wrong from there. First, patient privacy law doesn't have an exception for "but they said it first" — once a patient discusses their own care publicly, the clinic is still bound by confidentiality; the patient waiving their own privacy doesn't waive yours. Second, even confirming someone was a patient at all (without a single clinical detail) is a disclosure if the clinic hasn't had explicit consent to say so. Third, a defensive public reply almost always reads worse to future patients than the original review — it signals a clinic that argues in public rather than one that handles concerns like a professional.

The safe reply template

Thank you for taking the time to share your feedback. We take all feedback seriously and [we're sorry to hear you feel this way / we're sorry your experience didn't meet expectations]. As a healthcare provider, we're bound by patient confidentiality and are not able to confirm or discuss any details relating to a specific person's care in a public forum, even where details have been shared here. We'd genuinely welcome the chance to understand more and address this properly — please contact our practice directly on [phone number] or [email], and ask for [Practice Manager / Owner name]. Thank you again for reaching out.

Fill in the brackets, drop it in as-is, and resist the urge to add "but actually..." anywhere in the middle. The whole point of this template is that it never varies its shape, whatever the review says.

Physiotherapy clinic: A one-star review claims "the physio didn't even examine my shoulder properly and just gave me the same exercises as everyone else." Safe reply: "Thank you for sharing this. We're sorry to hear your experience didn't meet expectations. As a healthcare provider we're not able to confirm or discuss details of anyone's individual care publicly. We'd really like to understand what happened — please call our clinic on [number] and ask for [name] so we can look into this properly." No mention of appointments, diagnoses, or exercise plans, even to correct them.

Psychology/counselling practice: A review states "I told them about my anxiety and they cancelled on me twice and never followed up." This one is especially sensitive — even acknowledging the person attended would confirm they've accessed mental health support. Safe reply: "We take feedback like this seriously and are sorry to hear this. We're unable to confirm or discuss any details relating to a specific person's care in this forum. If you'd like to raise this with us directly, please contact our practice manager on [email] — we'd like the opportunity to address it properly." No reference to appointments, cancellations, or the condition mentioned.

Dental practice: A review says "had a filling done here in June and it's already come loose, waste of money." Safe reply: "Thanks for letting us know — we're sorry to hear this. As a dental provider we can't confirm or go into detail about any individual's treatment on a public platform. We'd like to make this right, so please call the practice on [number] and ask for [name] and we'll get you booked in to have it looked at." No confirmation of the June visit, the filling, or the fee, even though the reviewer named all three.

How to actually put this into practice

Nominate one person — usually the practice manager or owner — as the only staff member who posts public review replies, so the tone and boundaries stay consistent. Reply within 24-48 hours; a slow response reads as indifference, but a same-hour defensive reply reads as reactive. Use the template every time, adjusting only the opening sentiment, never the confidentiality line. Keep a private log of the review, your reply, and any follow-up call, in case it escalates. If the review discloses genuinely sensitive information — a diagnosis, a treatment outcome, an appointment date — you can also report it to Google under their policy against posts that reveal private or confidential information; removal isn't guaranteed, but it's worth lodging alongside your public reply, not instead of it.

💡 Heads up: Google does not remove reviews just because they're negative or unfair — only because they breach its own policies (fake reviews, hate speech, or content revealing private information). Report it, but don't wait on the outcome before posting your own considered, privacy-safe reply.

Mistakes that turn a bad review into a real problem

Replying from emotion, same-day, before anyone senior has seen it — get a second set of eyes before anything goes public.
Confirming attendance to defend the clinic — "we saw you on X date and did Y" is a disclosure, full stop.
Engaging back-and-forth in the comments — every reply is a fresh chance to say something you shouldn't.
Letting junior or casual staff respond — one nominated responder keeps the standard consistent.
Assuming the reviewer waived privacy by posting first — they can waive their own; your obligations don't move.

Please note: this is general information, not legal or medical advice — check current guidance from AHPRA, your professional indemnity insurer, and the relevant privacy legislation before relying on it.

Frequently asked questions

Can we ask happy patients to leave reviews to balance out a bad one?

For AHPRA-registered professions — physios, psychologists, dentists, chiropractors, osteopaths, podiatrists, optometrists, nurses, GPs and dietitians giving clinical advice — soliciting patient testimonials about clinical care is off-limits under AHPRA's advertising guidelines, and that includes actively campaigning for Google reviews about treatment. A compliant alternative is to make it easy for patients to find and review your practice generally (location, booking ease, front-desk experience) without prompting or incentivising reviews about clinical outcomes, and to focus your energy on responding well to whatever comes in rather than chasing volume.

What if the reviewer already named the practitioner and described their treatment in detail?

Your obligations don't change. The patient can choose to disclose their own information; the clinic still cannot confirm, deny, or add detail to it in a public reply.

Should we just delete or hide the review instead?

You can't delete someone else's review — only flag it to Google as a policy violation, which is reviewed against Google's own rules, not yours. A flag isn't a guaranteed removal, so a calm public reply is still your main tool.

Does this approach actually make the review go away?

No — and that's the honest limit here. The template won't erase the one-star rating or the review itself; what it does is stop a privacy breach, stop the situation escalating, and show every future patient reading your reviews that you handle concerns professionally. That's a reputation outcome, not a review-removal one.