Scripts

How to respond to a 1-star review: scripts for dental practices and med spas

By the ClinicEcho team · Updated November 2, 2026 · For US med spas and dental practices

A 1-star review is read by more future patients than anything on your website. Here is the reply that wins them over, the HIPAA line that has cost dental practices real money, four templates, and what Google will and will not take down.

The notification lands at 9 pm: one star, a paragraph about the wait, the bill, or the front desk, and your name in it. The urge is to reply at once and set the record straight. Don't. In Tebra's June 2025 survey of 3,964 US adults, 79% of patients read reviews before choosing a provider and 53% won't consider one rated under four stars; but 70% said a provider's reply to a negative review improved their opinion, and 78% said they would return to a practice if their concerns were addressed. The reply is where the damage is undone, as long as you write it for the next hundred readers rather than for the reviewer.

Before you type anything

Three checks, in order. First, is this a patient? Search the name and the details against your schedule, quietly; the chart is for you, not for the reply. Second, what actually happened? Ask the staff who were there, the same day. Most 1-star reviews describe something real that looked different from the other side of the desk. Third, which kind of review is it: a complaint about service, a complaint about money, a complaint about a clinical result, or something that isn't a patient experience at all. Each gets a different reply, and only the last one is worth reporting.

Then wait until the next business morning. A reply written angry reads angry for years.

The line you cannot cross

When a reviewer writes about their own visit, nothing in HIPAA stops them. When you answer, you are a covered entity speaking in public, and confirming that the person is a patient, let alone what they came in for, is a disclosure of protected health information. Two dental practices have paid for exactly this. In 2019, Elite Dental Associates of Dallas settled with the HHS Office for Civil Rights for $10,000 after replying to a review with the patient's name, treatment plan, insurance and cost details, and OCR found similar replies to other reviews. In December 2022, New Vision Dental in California paid $23,000 after its owner answered reviews with patients' full names, visit details, treatment and insurance information. OCR's director put it in four words: "This is a clear NO."

The working rule: write every reply as if you have never heard of the reviewer. No "your appointment," no "your insurance," no "when you came in on Tuesday," and no "we have no record of you," which is also a statement about your records. Google's own guidance for replies says the same thing in plainer terms: never share a reviewer's private information, and for anything complicated, "politely request that the reviewer contact you via phone or email to resolve the issue privately."

Four templates

Each one is short, names a person, gives a direct line, and says nothing about the reviewer's care.

1. The service complaint: wait, front desk, unanswered phone

"Thank you for taking the time to write this. A long wait with no explanation, or a call that goes unanswered, is not the experience we want anyone to have, and we are looking at how it happened. I'd like to hear the details directly: please call me, [first name], the practice manager, at [direct number], or email [address]. We'll make it right where we can."

It doesn't say the reviewer was a patient, doesn't explain the wait, and doesn't promise a refund in public.

2. The money complaint: fee, insurance, surprise bill

"Thank you for the feedback. We can't discuss anyone's account or insurance publicly, but billing questions are something we take seriously and want to resolve. Please call [first name] at [direct number] and we'll go through it line by line. For anyone reading: we give a written estimate before treatment, and our fees and the plans we work with are listed at [website page]."

The last sentence is for the readers, and it only works if the page exists; our insurance scripts cover what the front desk should have said on the phone.

3. The clinical complaint: a crown that fell off, a result that disappointed

Med spas get "my Botox did nothing" and "nobody warned me about bruising"; dental gets "the filling fell out in a week." Never argue the result in public, and never diagnose it either.

"I'm sorry to read this. Results and aftercare are things we only ever discuss with the person concerned, in private, so I won't comment here, but I would like to hear from you. Please call [provider or manager name] directly at [number] so we can look at it together as soon as possible."

If a free follow-up is the right clinical answer, it is offered on that call, on its merits, and not as a trade for editing the review.

4. The review you believe is not from a patient

A competitor, a former employee, someone who confused you with the practice across the street. Reply once, neutrally, then report it (next section).

"Thank you for the comment. We don't recognise the situation described, and we don't discuss anyone's care publicly in any case. If you've been to our practice and had this experience, please call [name] at [number] and we'll look into it straight away."

When Google will remove a review, and when it won't

Google is explicit: "Do not report a review just because you disagree with it or dislike it." Only reviews that violate its content policies are eligible for removal, and the page adds that negative reviews "can highlight areas for improvement." The violations that matter to clinics: fake engagement (a review not based on a real experience), a conflict of interest (a current or former employee, a competitor), off-topic content (a political rant, a review of a different business), harassment, and posting someone's personal information without consent. Content that "describes negative experiences in a respectful manner" is allowed and stays up.

To report one, open the review in your Business Profile and use the Report option, or use Google's Reviews Management Tool, which shows each report's status. Google says evaluation "typically takes several days," and if the report is rejected you get one appeal. Report only the ones you can evidence.

What you must not do about it

The Federal Trade Commission's rule on consumer reviews, in effect since October 2024, bars businesses from using "unfounded or groundless legal threats, physical threats, intimidation" to get a negative review removed, and bars compensation "conditioned on the writing of consumer reviews" of a particular sentiment. Law firm Davis Wright Tremaine summarised the exposure as civil penalties of "as much as $51,744 per violation" at the time the rule was adopted. Google's policies for businesses add that incentives for reviews, including in exchange for changing or removing one, count as fake content, and that merchants may not discourage or prohibit negative reviews. So: no lawyer threats, no "we'll refund you if you change it," and no review link that goes only to the patients you expect to be happy.

Fix what the review is about

Read a month of your own 1-star reviews and most will share a root: the phone. A new patient who called twice and got voicemail, a callback promised and not made, a billing question nobody returned. Those are process failures with a timestamp: pull the call log for the day the review mentions and see whether the call ever reached a person. Our lunch-gap guide and the after-hours call test show where the gaps usually are. An AI receptionist closes the commonest one by answering every call and sending a transcript within a minute, so a complaint reaches a human the same day instead of Google the same night. Call records are PHI; the vendor holding them needs a BAA.

Make the next 1-star review matter less

A single 1-star review on a profile with twelve reviews is a rating problem. On a profile with two hundred, it is one voice. Google lets you share a review request link or QR code; send it to every patient after every visit, not to a selected few, and let the ratings fall where they fall. Then put the reply system on paper: who answers reviews, within two business days, from templates like the ones above, with a rule that the chart is never opened in the reply box. Our website checklist covers showing those reviews on your own site once they are there.

Hear what your patients would hear

ClinicEcho's AI receptionist is answering a demo dental practice right now. Call it, ask about an appointment, try to book. Then request a free audit and we'll call your own clinic after hours and show you what happens.

Frequently asked questions

Should I reply to every 1-star review?

Yes, once, within two business days, in the voice of the practice. The reply is for the next hundred readers, not for the reviewer. Skip the reply only when a lawyer has told you to, and never reply a second time to argue.

Can I say "we have no record of you as a patient"?

No. Saying someone is not a patient is still a statement about your patient records, and it invites the reviewer to post proof. Use the neutral line: "We don't discuss anyone's care publicly; if you'd like to talk, call [name] at [number]."

Can I offer a refund or a free touch-up to get the review changed?

Not in exchange for the review. Google removes reviews tied to incentives and the FTC rule bars compensation conditioned on a review's sentiment. Resolve the complaint on its merits, privately; if the patient then edits the review on their own, that is their choice.

Does ClinicEcho help with reviews?

Indirectly. Many 1-star reviews begin as a call that rang out or a callback that never came. ClinicEcho answers every call, books, and sends a transcript within a minute, so a complaint gets a person the same day. $497 a month, 14-day free trial, BAA signed first. Call the demo line, (602) 536-0014.

Sources

Read next