Reputation management for dentists: the review routine, the reply that cost three practices, and what software is worth paying for

Reputation management for dentists comes down to four habits: ask every patient for a review in the same neutral way, read every review the day it arrives, reply in public without ever confirming that the reviewer is a patient, and keep your practice listings accurate. The reply rule is the one that is special to dentistry. In the United States, three dental practices have paid the Department of Health and Human Services between $10,000 and $50,000 after answering online reviews with patient details. Get the reply right first, then build the review flow, then decide whether software or a service is worth the money.

Why a dental practice is different from other local businesses

A cafe can answer a bad review with "Sorry about your cold coffee, we checked the machine." A dentist cannot write the equivalent. The moment a reply says "we reviewed your chart" or "your crown was fitted on the 4th", the practice has disclosed protected health information in public. The patient's own review does not change that. They chose to talk about their care. You did not get their permission to talk about it.

Patients also choose a dentist in a narrow way. Most start with a phone search, look at the three practices on the map, read the newest reviews, and book. The work in our wider guide to marketing for dentists sits around that moment. Reputation is the part of it that the practice does not fully control, which is why it needs a routine rather than an occasional push.

The reply rule, from three real enforcement cases

These are the cases the HHS Office for Civil Rights has published, read on its resolution agreement pages on 21 October 2026:

Practice	What happened	Outcome
Elite Dental Associates, Dallas, Texas (2019)	Social media disclosures of patients' protected health information	Paid $10,000 and adopted a corrective action plan
Dr. U. Phillip Igbinadolor, D.M.D. and Associates, North Carolina (2022)	Disclosed a patient's information on a webpage in response to a negative online review, then did not respond to OCR	A $50,000 civil money penalty
New Vision Dental, California (2022)	Disclosed patient information in response to online reviews	Paid $23,000 and agreed to a corrective action plan

OCR's own summary of the New Vision case is blunt: the violation "involves the provider's inappropriate use of social media to respond to patient reviews, disclosing protected health information. This practice is illegal under HIPAA."

So a safe reply has a fixed shape. It thanks the reader, speaks about the practice's general policy rather than this person's care, and moves the conversation to a private channel with a named contact. For example:

"Thank you for taking the time to write this. We take every comment about our practice seriously and we would like to talk it through properly. Please call our practice manager, Priya, on the main number and ask for her by name."

That reply does not say the person was seen, what they had done, or what the notes show. It works for a five star review too: thank them, mention something the whole team does well, and stop. For the general mechanics of answering and reporting reviews, our guide to replying to Google reviews and what Google will remove covers the steps. This page adds the dental limit on top of it. It is general information, not legal advice, and your privacy officer or a healthcare lawyer should approve the reply policy.

Getting reviews the way the rules allow

Two sets of rules decide how you ask. The first is the review site's own policy. Google's Maps content policy, read on 21 October 2026, does not allow businesses to "offer incentives, such as payment, discounts, free goods and/or services, in exchange for posting any review", to "discourage or prohibit negative reviews, or selectively solicit positive reviews from customers", or to pressure people to leave a review "while on the premises".

The second is federal law. The FTC's rule on consumer reviews and testimonials, 16 CFR Part 465, makes it a violation to give "compensation or other incentives in exchange for, or conditioned expressly or by implication on, the writing or creation of consumer reviews expressing a particular sentiment". It also covers reviews written by staff and managers without disclosure, and threats used to get a review taken down.

In practice that gives a simple routine:

• Ask everyone, the same way. A text or email after each completed appointment with a direct link to your Google review form. No filter that sends happy patients to Google and unhappy ones to a private form.
• Do not reward the review. No discount on the next cleaning, no prize draw for reviewers.
• Do not ask in the chair. Send the request after the visit, from the system, so nobody feels watched.
• Keep the team out of it. Staff and their families should not review the practice, and no one should be given a target number of reviews to collect.
• Keep the message free of clinical detail. "Thanks for visiting us today" is fine. "How did your root canal go?" puts treatment information in a message that may be read by someone else.

The weekly routine for one practice

Task	Who	Time
Read new reviews on Google, Yelp and any dental directory you are listed on	Practice manager	10 minutes a day
Reply to every review using the approved shapes	Practice manager, dentist signs off on anything angry	20 minutes a week
Call back anyone who left a complaint and gave enough detail to be identified	Practice manager	As needed
Check opening hours, phone number, insurance accepted and dentist names on every listing	Front desk lead	15 minutes a month
Search the practice name and each dentist's name to see what a new patient sees	Owner	15 minutes a month

The private call-back is where most real repair happens. A patient who feels heard is free to update their own review. You may not ask them to, and you may not offer anything for it, but a fixed problem changes what people write.

Software, a service, or neither

Dental reputation management software usually does three jobs: it sends the review request after each appointment, it collects reviews from several sites into one inbox, and it reports on rating and volume over time. Check whether your practice management or patient messaging system already sends review requests before you add another tool.

Software earns its cost when you run more than one location, when several people reply to reviews, or when you want the request triggered automatically from the appointment book. A single dentist with one front desk can run the routine above with a calendar reminder.

A paid reputation service makes sense for a specific problem: a fake review campaign, a false article ranking for a dentist's name, or a rebrand after a partner leaves. Before you sign, ask these questions:

• Will you reply to reviews for us, and who checks each reply for patient information?
• Will you sign a business associate agreement if you touch our patient list?
• How do you get new reviews, and does any part of it filter patients by expected rating?
• What exactly happens if you think a review is fake?

Walk away from anyone who offers to remove genuine negative reviews, to write reviews, or to "bury" bad ones with volume. Those offers break the review sites' policies and the FTC rule, and the practice carries the consequences.

Questions about reputation management for dentists

Can a dentist reply to a negative review without breaking HIPAA?

Yes, if the reply never confirms the person is a patient or mentions their care. Thank them, describe the practice's general approach, and give a named contact for a private conversation. All three OCR dental cases above involved replies that went further than that.

Can we offer a discount to patients who leave a review?

No. Google's policy forbids incentives for reviews, and the FTC rule forbids incentives tied to a positive or negative sentiment. Ask every patient the same way and leave it there.

Is it allowed to send unhappy patients to a private feedback form instead of Google?

Google's policy forbids selectively soliciting positive reviews. A private feedback form is fine for everyone, as long as everyone also gets the public review link.

How many reviews does a dental practice need?

There is no fixed number. What patients notice is how recent the newest reviews are and whether you replied. A steady flow every week does more than a burst after a campaign.

Should the dentist or the practice manager reply?

The practice manager can handle most replies using approved shapes. Anything angry, anything that mentions a clinical outcome, and anything that hints at a legal claim should go to the dentist and, where needed, your privacy officer before a word is posted.

The review a patient never reads

More patients now ask an assistant, "Which dentist near me is good with nervous patients?", before they ever open the map. The answer names two or three practices, and it is built from the same reviews, listings and practice pages this routine looks after. Run that question yourself for your town and your main treatments, and note who gets named and why. AI Knows Us puts those patient questions to ChatGPT, Gemini and the other assistants and shows which practices come back, which is the newest place a dental reputation is now read.