Every word of a Google reply
is a published word.
Google posts your reply under the review, shows it as coming from the practice, and tells the reviewer it arrived. One channel, no private half. The largest federal penalty yet over a dental review reply, fifty thousand dollars, was for a response a practice posted on its own Google page, and that is the design constraint every reply below is written against.
No credit card required. 30-day free trial.
What Google does with a reply before a patient reads it
Four mechanics that decide what a practice can safely write. Each is Google's own documentation rather than our reading of it.
A reply is posted publicly under the review. It shows as coming from the business, and the personal name of whoever typed it is not displayed.
There is no private option on a Google review. Anything you would only say to the patient has to happen on a phone call, and the reply has to work without it.
The person who wrote the review is notified when you reply.
A reply lands in somebody's inbox whether or not they ever return to the listing, so a defensive one is read by the exact person you least want to escalate.
Google checks a reply against its content policies before it appears. That usually takes up to ten minutes and can take up to thirty days.
A Google reply is not a same day damage control tool. Write it for the person reading the listing six months from now, because that is who will see it.
Google's own policy for content people post on Maps prohibits publishing someone's personal information without consent, and names full names and medical information among the categories.
The platform rule and the federal rule point the same direction here, which is unusual and useful: a reply that would breach one almost certainly breaches the other.
One review, answered twice
The Office for Civil Rights imposed a fifty thousand dollar civil money penalty on a North Carolina dental practice over a reply it posted on its own Google page. It proposed the penalty in October 2020, made it final in June 2021, and announced it in March 2022. The reviewer had written under a pseudonym. The reply named him, counted his visits since 2013, and described the treatment plans his insurer had approved. It is the largest of the three federal actions over dental review replies, and the only one about a reply on Google. The first reply below has the same shape.
The shape that drew the penalty
Hi Sara, we are sorry the crown appointment ran long. Your plan denied the buildup, so we had to rebook the seat, and we did call twice about the balance before you came in.
A reply that confirms nothing
Thank you for taking the time to write this. We would like to hear more and put it right. Please call the office and ask for the practice manager, who can go through it with you directly.
The second reply never confirms the writer is a patient, never names a procedure or a date, and never mentions coverage. It is shorter, it reads like a person wrote it, and there is nothing in it for anybody to quote back at the practice later.
Sources
- Dr. U. Phillip Igbinadolor, D.M.D. & Associates, P.A. (UPI) HIPAA Enforcement Action HHS Office for Civil Rights. Read 2026-09-10.
- UPI Notice of Proposed Determination HHS Office for Civil Rights. Dated 2020-10-22. Read 2026-09-10.
- UPI Notice of Final Determination HHS Office for Civil Rights. Dated 2021-06-01. Read 2026-09-10.
- Four HIPAA Enforcement Actions Hold Healthcare Providers Accountable With Compliance HHS Office for Civil Rights. Dated 2022-03-28. Read 2026-09-10.
Google is rarely the only listing with your name on it
New patients start on Google and then check whatever else the search results hand them. Every platform we connect arrives in the same inbox, with a draft already attached to each review.
- Yelp
- TripAdvisor
- DoorDash
- Trustpilot
- Etsy
- Square
What a practice asks before it replies at all
Including the one where the answer is no.
The reviewer named their own procedure. Can the reply repeat it?
It should not. A patient disclosing their own care does not make it the practice's disclosure to publish, and the penalty over a Google reply turned on exactly that: the practice repeated the visits and the treatment plan back at somebody who had written under a pseudonym. Drafts here are written not to confirm a procedure, a date or a plan, even when the review names all three.
Is it safe to reply when the review is obviously not a patient?
Replying is safe. Explaining why you think it is not a patient usually is not, because the reasons are things like no appointment that week or no chart under that name, and each of those is a statement about your records. The draft answers the next reader instead of arguing with the reviewer.
Do you sign a HIPAA Business Associate Agreement?
Not yet, and that belongs on the page rather than in a footnote. If your practice requires a signed BAA before any vendor holds patient contact details, GetSetReply is not the right fit for you today.
Does GetSetReply post the reply to Google for us?
No. We draft, you post. Every draft is written, shown to you, and left for you to send, which on a page about what may go into a public reply is the only defensible design. Nothing is published on your behalf.
How quickly does a reply show up on the listing?
Google says a reply usually takes up to ten minutes to review and can take up to thirty days. That is the platform's timing rather than ours, and it is a good argument for writing the reply carefully instead of quickly.
For dental practices
Drafts that say enough and confirm nothing
Every reply is written for you to read and post yourself. We do not yet provide a HIPAA Business Associate Agreement.