HIPAA-Safe Review Response Templates for Dentists

Replying as a covered entity: the one rule

Every template on this page follows a single constraint: never confirm the reviewer was a patient. Not by name, not by date, not by procedure, and not even when the reviewer described their own treatment in detail. HIPAA doesn’t stop a practice from replying; it stops the practice from using anything it knows because the person was a patient. Which leaves plenty: gratitude, values, general standards, and a phone number.

Dental practices OCR has penalized for review replies

This rule gets enforced. The HHS Office for Civil Rights (OCR), which enforces HIPAA, has resolved three cases against dental practices over how they answered online reviews. As hhs.gov describes them:

• Elite Dental Associates, Dallas: $10,000 settlement (2019). Its Yelp replies gave a patient’s last name, details of her treatment plan, and insurance and cost information, and OCR found other patients’ information in its replies too (hhs.gov).
• New Vision Dental, California: $23,000 settlement (2022). Its Yelp replies sometimes gave a patient’s full name where the patient had posted under a username, plus visit and insurance details the review hadn’t mentioned (hhs.gov).
• Dr. U. Phillip Igbinadolor, D.M.D. & Associates, North Carolina: $50,000 civil money penalty (2022). The practice disclosed a patient’s information on a webpage in response to a negative online review, then didn’t answer OCR’s data request or subpoena (hhs.gov).

Outside dentistry, Manasa Health Center, a New Jersey psychiatric practice, settled for $30,000 in 2023 after its replies to four patients’ negative Google reviews disclosed their health information (hhs.gov). Every case began with a review the patient wrote, and the patient posting first didn’t make the details fair game. The full write-up of all four is in what OCR has penalized in review replies.

The never-say list, before the templates:

• “Your appointment / your visit on [date]”: confirms patienthood.
• “Your crown / cleaning / extraction”: treatment detail, even if they said it first.
• “Our records show…” / “We have no record of you”: the chart is off-limits in public, in both directions.
• “Your insurance denied…” / “your balance”: billing and insurance details are PHI too, and they’re in two of the three dental cases above.
• “Your son / your daughter”: a child’s visit is protected the same way.
• “Dr. [Name] enjoyed seeing you”: naming who treated them confirms the treatment.
• Naming them as a patient in any tense, “when you were our patient” included.

The safe skeleton every reply below is built on: thank or acknowledge generically → state the practice’s standard → invite a direct call.

Dental ratings on Google: why the rare 1★ gets read

In our own collection of public Google Maps listings (August 23 – September 18, 2026), dentists have the highest median review count of the 50 industries we measured (full benchmarks by industry):

	Dentists	Orthodontists	Cosmetic dentists
Practices in the sample	880 (28 US cities)	675 (18 cities)	215 (8 cities)
Median Google rating	4.9★	4.9★	4.9★
Median number of reviews	408	190	356
Share below 4.5★	9.9%	7.0%	1.9%
Share below 4.0★	2.3%	2.4%	none

Orthodontists and cosmetic dentists come from their own Google Maps searches (the orthodontist row, the cosmetic dentist row); each practice is counted once. What the numbers mean for the reply you’re about to write:

• One 1★ barely moves the average. A dental practice with 408 reviews averaging 4.9★ goes to about 4.89 after one new 1★ review. A quarter of dental practices have fewer than 200 reviews; at 200, the same review takes the average to about 4.88. Orthodontists run thinner: a quarter have fewer than 61 reviews, and at 61 one 1★ takes a 4.9★ average to about 4.84.
• But it stands out. When nine in ten practices hold 4.5★ or better, a prospect comparing three nearby offices scrolls past a run of five-star reviews, and the 1★, with whatever you wrote under it, is what they stop on. Anyone who sorts by lowest rating sees it first.
• So the reply does the damage control, not the rating. The reply under a 1★ is where a prospect sees how the office handles a problem. It’s also the reply most likely to be written in a hurry, upset, with the chart open, which is how a name, a visit date or an insurance detail slips in.
• Below 4.5★, replies alone won’t fix it. A practice in the bottom tenth needs fresh reviews from more of its patients, asked the same way every time and never filtered first; that work is covered in review management for dentists. Replies protect a rating; asking every patient rebuilds it.

Find the template for your review

Jump straight to the template that fits the review in front of you:

The review you’re facing	Template #
Positive, no specifics	1–2
”I was terrified and it was fine”	3
Praise for a specific hygienist or the front desk	4–5
Positive, naming a procedure or result	18
Billing complaint	6
Surprise insurance or out-of-pocket amount	14
Long wait	7
Pain or treatment-outcome complaint	8
Rude-staff accusation	9
One star, no text	10
A parent writing about their child’s visit	15
Looks meant for another practice	11
”I was never a patient there” (billed or contacted by mistake)	16
Names a specific dentist at a DSO or group practice	17
Mixed three-star (care vs. office, or price)	12–13

Positive review templates

1. The glowing review

Thank you so much for the kind words! Comfort and clear communication are what this team works hardest at, and reviews like this mean a great deal to all of us. We appreciate you taking the time.

If the review names a treatment or a result, use template 18 instead.

2. The wordless five-star

Thank you for the five stars — we’re grateful you took a moment to share this!

3. The “I was terrified and it was fine” review

Thank you for sharing this. Helping anxious visitors feel at ease is something this whole team trains for — hearing that it made a difference is the best feedback there is.

4. The praise-for-a-specific-hygienist review

Thank you! We’re lucky to have a team that treats every person who walks in like family — we’ll make sure your kind words reach them. It’ll make their week.

5. The front-desk / scheduling praise

Thank you for noticing the front desk — smooth scheduling and honest answers about costs are half of good care, and that team rarely gets the credit. We appreciate it!

Negative review templates

6. The billing complaint

We take billing concerns seriously, and we’d like the chance to look into this properly. Please call our office manager at [phone] — we review every question about charges directly and personally.

When the complaint is about what insurance did or didn’t cover, template 14 goes further.

7. The long-wait complaint

We’re sorry to hear this — respecting people’s time is a standard we hold ourselves to, and we fall short of it some days. We’d appreciate the chance to hear more: please call us at [phone].

8. The pain / treatment-outcome complaint

We’re sorry to read this. Anyone with a concern about their experience deserves a direct conversation, not a comment thread — please call [dentist/office manager name] at [phone] so we can address it properly.

9. The rude-staff accusation

That’s not the experience we train for, and we take it seriously. We’d like to understand exactly what happened — please call our office manager at [phone]. Every conversation in this office should feel respectful, full stop.

10. The one-star with no text

We’re sorry to see this. We’d genuinely like to understand what went wrong and make it right where we can — please call us at [phone].

11. The review that appears meant for another practice

We take every review seriously, but we believe this one may be intended for a different office. If we’re mistaken, please call us at [phone] — we’d want to know. We’ve also asked Google to review it.

Use this only when the review describes another office: a dentist you don’t employ, a service you don’t offer, an address that isn’t yours. If the reviewer says your office billed or contacted them for care they never had, use template 16.

Neutral / three-star templates

12. The “good care, disorganized office” three-star

Thank you for the balanced feedback. We’re glad the care itself earned your confidence, and the scheduling frustration is fair — we’ve been working on exactly that. If you’re open to it, call [phone] and tell us more; it helps.

13. The price-focused three-star

Thank you for the honest review. We aim to be upfront about costs before any work begins, and we’re always glad to walk through options and alternatives — please call [phone] anytime with questions.

Five dental situations that need extra care

These come up all the time in dental offices, and they’re where well-meant replies leak the most. Each one below has when to use it, the reply, and what not to write.

14. The surprise insurance or out-of-pocket bill

When to use: the review says insurance “should have covered it”, the bill came in higher than the estimate, or a charge arrived months after the visit.

Thank you for raising this. Unexpected costs are frustrating, and dental insurance can be genuinely hard to read. Privacy rules keep us from discussing anyone’s account or coverage in a public reply, but our billing coordinator, [name], looks into questions like this personally. Please call [phone] and ask for [name].

What not to write: the annual maximum, a deductible, a downgraded benefit, the claim status, a balance, “the estimate you signed”, or “we’ve adjusted your account”. Insurance and cost details are exactly what the Elite Dental and New Vision Dental replies contained. If the call resolves it, don’t post a follow-up such as “glad we sorted out your refund”: that confirms an account. If the reviewer updates the review, “Thank you for the update” is enough.

15. The parent reviewing their child’s visit

When to use: a parent or guardian writes about a child’s visit, in praise or in complaint, often with the child’s name, age or what was done.

For praise:

Thank you for taking the time to write this! Making visits comfortable for every age is something this whole team works at, and kind words like yours mean a lot to us.

For a complaint:

We’re sorry to read this. Any family with a concern deserves a direct conversation, not a comment thread. Please call our office manager, [name], at [phone], so we can listen properly.

What not to write: the child’s name or age, “your son’s first cleaning”, “she was so brave”, “no cavities!”, “see you at the six-month checkup”, or an account of what happened in the chair (“he kept moving, so we had to…”). A parent can usually see their child’s records, but a public reply isn’t a private conversation with the parent; it’s a disclosure to everyone who reads it. If the complaint is about a policy, such as whether parents can stay in the treatment room, you can state the policy in general terms. Don’t apply it to this visit.

16. “I was never a patient there”

When to use: the reviewer says they’ve never been to your office but received a bill, a collections notice, a recall text or a call from you, or that they were turned away before being seen. Template 11 covers reviews that describe a different office; this one is for someone your systems may have reached.

Thank you for letting us know, and we take it seriously. Privacy rules keep us from discussing anyone’s records in a public reply, including whether someone is a patient here. Please call our office manager, [name], at [phone], and we’ll look into it right away.

What not to write: “We have no record of you”, “you’ve never been a patient here”, or “that bill was meant for another patient with the same name”. A denial is still a public statement about what your records contain, and the honest explanation of a mix-up usually discloses somebody else. The usual advice to answer a suspect review with “we have no record of this customer” works for a hotel or a plumber; for a covered entity, the reply has to read the same whether or not the person is in your system.

Behind the scenes: if a bill, reminder or call reached the wrong person, it may have carried another patient’s information, which makes it a possible privacy incident for that patient. Send it to your privacy officer (HIPAA requires every covered entity to designate a privacy official), not only to the front desk. If the review is plainly about another business, report it to Google as off-topic; see what Google will and won’t remove.

17. The review that names a dentist at a DSO or group practice

When to use: the review names one dentist, hygienist or specialist at one location of a group, in praise or complaint, whether it lands on the location’s profile or on the dentist’s own.

For praise:

Thank you! We’ll make sure your kind words reach the team at [location]. Feedback like this means a great deal to them.

For a complaint:

We’re sorry to read this. Concerns like this deserve a direct conversation with the people who can act on them. Please call [name], our practice manager at [location], at [phone].

What not to write: the dentist’s name next to the reviewer’s experience (“Dr. [Name] remembers your visit”, “Dr. [Name] is sorry the extraction hurt”), a defense of the dentist’s clinical judgment, or a reply from the named dentist’s own account. Naming who treated the reviewer confirms there was treatment. Groups have two more traps: a corporate boilerplate reply that names the wrong office, and a phone number that rings a central line nobody at the location answers. If the named dentist has left the group, you can say so (“Dr. [Name] is no longer with the practice”), but say nothing about the reviewer’s care in the same reply.

18. The five-star that names the procedure

When to use: “My implants look amazing”, “finally done with aligners”, “painless wisdom teeth removal”. The reviewer is happy and specific.

Thank you for this. It’s the kind of review the whole team reads twice. We’re so glad you’re happy, and we’ll share your kind words with everyone here.

What not to write: the procedure back to them (“enjoy the new implants!”, “so glad the aligners worked”), the result (“your new smile”), or the next step (“see you at your next adjustment”). Mentioning implants under a review about implants confirms the visit and the treatment: the kind of treatment-plan detail Elite Dental’s replies included. That also rules out a common local-SEO tip, putting service keywords (“dental implants in [city]”) into review replies. In a dental office, the keyword is the PHI. The reviewer’s own words already sell the procedure, and they’re right above your reply.

Running replies across a DSO or multi-location group

In a group, every location’s reply is the organization’s reply, and the 1★ that leaks a detail can come from any office. What keeps 10 or 40 offices consistent:

• One approved library. The skeleton and templates above, with [phone], [name] and [location] filled in per office, so nobody improvises under a 1★.
• Location managers reply, and 1–2★ replies get a second reader. The manager knows the context; the second reader catches the detail that slipped in.
• Sign with a role, not a provider. ”— Practice Manager, [location]” keeps dentists out of their own review threads.
• Track reply time per location. A per-office number shows which location has a 1★ sitting unanswered. More on running this at scale in multi-location review management software.

Why “careful” beats “silent”

Practices afraid of HIPAA often reply to nothing, which reads as indifference to the next prospective patient scrolling the profile, and forfeits the activity signals that feed local ranking. The compliant pattern above takes thirty seconds per review once it’s habit. The wider system (when to ask, how velocity compounds through recall visits, what Google weighs) is in Google Maps marketing for dentists and review management for dentists, with general reply craft in how to reply to Google reviews.

The operational half: ReputeMap alerts the practice within minutes of a low-star review and drafts confirm-nothing replies with AI — every draft follows the skeleton on this page, and nothing is posted to Google until a person taps Publish, unless you switch on Auto-reply to new reviews (paid plans, 4–5★ by default), so the compliance judgment stays with the practice. For DSOs, every location’s reviews land in one inbox, and on Growth and above the multi-location dashboard tracks reply coverage and SLA per location. Try drafts free in the review response generator, or start a 14-day free trial (card required). Setup takes about 3 minutes.