How Dental Practices Should Handle a Negative Google Review (Without Breaching Patient Privacy)

11 August 2026·6 min read

Quick answer: Never confirm or deny that someone was a patient, and never discuss treatment details in a public reply — even to correct the record. Acknowledge the feedback in general terms, stay calm and brief, and invite them to contact the practice directly. The goal of a public reply isn't to win the argument, it's to show every other reader that you handled it professionally. ✨

Every dental practice gets a bad review eventually — it's not a sign you're doing something wrong, it's a sign you've been open long enough. What actually damages a practice usually isn't the one-star review. It's the rushed reply that follows it, written by someone frustrated who accidentally confirms a name is a patient or explains what treatment they had. That's the moment a bad review turns into a privacy complaint. 💖

What most practices get wrong

The instinct when a review feels unfair is to set the record straight — reply with the actual timeline, the actual clinical notes, the actual reason things happened the way they did. That instinct is understandable, and under confidentiality obligations, exactly the wrong move. Even writing "we've checked our records and this patient..." is itself a disclosure, because it confirms someone is a patient of the practice. You've breached confidentiality before you've even got to your defence.

The second mistake is silence. Practices worried about saying the wrong thing sometimes say nothing at all, for months — and an unanswered negative review reads as "this happened and they didn't care" to every prospective patient who finds it later.

Please note: general information, not regulatory advice — check current AHPRA advertising guidelines and your state/territory privacy legislation before relying on it.

The neutral response formula

Four-part structure for any negative review reply — swap the brackets, keep the tone.

1. Acknowledge, without confirming.
"Thank you for taking the time to leave feedback."

2. Take it seriously, without admitting or arguing.
"We take all feedback about the experience we provide seriously, and we're sorry to hear this wasn't a positive one."

3. Move it offline.
"We'd welcome the chance to discuss this properly — please contact our practice manager, [name], on [phone/email]."

4. Close on your standard, without singling this person out.
"Providing a comfortable, professional experience for every patient is important to us, and we appreciate you letting us know."

Always leave out: the patient's name, any mention of treatment, dates, staff by name, clinical outcomes, or "our records show." If you wouldn't hand it to a stranger in a discharge summary, don't put it in a review reply.

Three practices, three reviews

The long-wait-time review: "Waited 45 minutes past my appointment, no apology, won't be back." Reply: "Thanks for the feedback — we're sorry your visit didn't run to time, we understand that's frustrating. We've been reviewing our scheduling to reduce this happening. If you'd like to discuss your visit specifically, please call our practice manager on [number]." No confirmation of the appointment, no excuses — just acknowledgement and a general operational note.

The misrepresented-outcome review: "Filling fell out within a week and they refused to fix it under warranty." The practice can't confirm this person was ever a patient, let alone discuss the treatment or warranty terms — even if its records tell a very different story. Reply: "We're sorry to hear you're unhappy. We're not able to discuss treatment details in a public forum, but we take concerns like this seriously — please contact our practice manager on [number] so we can look into it properly." Nothing here confirms or denies the claim.

The no-show review: Someone who booked and never showed up leaves one star: "Impossible to get an appointment, rude on the phone, wouldn't recommend." Saying so publicly ("you didn't show up") would confirm they had a booking — still a disclosure. The reply is the same neutral formula as any other. The urge to correct the record publicly is strongest here, and it's still the wrong move.

How to actually run this, step by step

Don't reply in the first hour. Come back to it once the emotional reaction has passed — the first draft you want to write is rarely the one you should post.
Route it to one person. The practice manager or principal dentist signs off on every public reply, not whoever's at the front desk that day.
Draft using the formula above and check: does this confirm anything about who this person is or what happened to them? If yes, cut it.
Post it, then stop. Don't reply again if they respond publicly — that conversation moves to phone or email.
Separately, decide whether to flag it to Google. Reviews breaching Google's policies (fake, off-topic, harassment) can be reported for removal — a different process that shouldn't hold up your public reply.
Log it internally so there's a record of what was said publicly and what (if anything) was resolved offline.

💡 The "our records show" trap: This is the single most common privacy breach in review replies, and it usually comes from someone trying to be helpful and accurate. Referencing records, treatment, dates or outcomes — even to defend the practice — confirms a patient relationship existed. Accuracy is not a defence if the disclosure itself wasn't allowed.

Mistakes to avoid

Naming the reviewer, confirming attendance, or referencing treatment, dates or clinical notes in a public reply
Getting drawn into a back-and-forth argument in the review thread
Sending the exact same copy-pasted reply to every review — it reads as robotic
Asking staff or happy patients to post reviews to "bury" the bad one — this can breach Google's policies, and patient testimonials carry their own advertising restrictions for regulated professions
Assuming a firmly worded reply or a threat of legal action will get a review removed quickly — it usually won't
Leaving it unanswered for weeks because no one wants to be the one to respond

Frequently asked questions

Can we ask Google to remove a fake or clearly false review?

Yes — reviews breaching Google's policies (fake, off-topic, harassment, conflicts of interest) can be reported for removal through Google Business Profile. Be honest about whether it genuinely breaches policy: removal isn't guaranteed, can take days to several weeks, and simply being unfair or negative isn't a removal ground on its own.

What if the reviewer names their own treatment in the review?

They're free to disclose their own health information — that's their choice to make. It doesn't give the practice permission to confirm, add to, or correct what they've said with any further detail. The practice's obligation not to disclose stands regardless of what the reviewer shares.

Should we ever confirm someone was a patient, even to say "we can't find you in our system"?

No — that's still a disclosure, just in the opposite direction. Confirming someone is not a patient is still a statement about your records. Keep the reply generic either way.

Can we respond to a bad review with a happy patient's story instead?

Don't use identifiable patient testimonials as a counterweight — for AHPRA-registered professions this is a hard no under advertising guidelines, not just a best practice. If you want to show prospective patients what to expect, use aggregate information (general patient satisfaction data) or de-identified case studies, rather than a specific patient's story.