Updated 2026-10-20
Healthgrades and Zocdoc review response templates
Healthgrades and Zocdoc are medical review sites, which means the ordinary rule of a good response (be specific about the visit) is the one thing you cannot do. A reply that confirms or denies that a reviewer is a patient is a HIPAA disclosure even when the reviewer announced it themselves, and even when the platform has already labelled them a “Verified patient,” as Zocdoc does for everyone who booked through it. The platform's label is the platform's; your reply still cannot confirm it.
Every template here runs the same three moves: acknowledge the feedback without confirming a relationship, generalize to the standard your practice holds for everyone, and invite the person to call a named, HIPAA-trained contact. Phone, not email. It reads a little formal next to a restaurant's reply, and that is the correct trade. Zocdoc's own guidance to practices says the same thing: respond professionally without confirming anyone is a patient or sharing protected health information.
Healthgrades and Zocdoc platform notes
Checked 2026-10-20. Neither Healthgrades' nor Zocdoc's help pages were readable from our build environment. The Zocdoc facts come from search excerpts of Zocdoc's own pages; the Healthgrades facts come from third-party vendor and law-firm guides and are labelled as such. Confirm in your provider portal before relying on a specific.
- Zocdoc: only a patient who booked through Zocdoc and attended the appointment (or had an interaction with the practice) can leave a review, and it is labelled “Verified patient.” Source: Zocdoc: verified reviews
- Zocdoc: reviews are moderated for profanity, privacy violations, spam and unverifiable medical claims, and are not edited for tone or sentiment. Providers cannot pay to alter or remove reviews. Partner Reviews collected by independent survey firms are shown alongside Zocdoc's own. Source: Zocdoc: structured information about its review system
- Zocdoc's guidance to practices: respond professionally without confirming that someone is a patient or sharing protected health information. Source: Zocdoc (The Script): how to get more patient reviews
- Healthgrades: profiles are built from the NPI registry, and once a provider claims the profile, vendor guides say they can respond to reviews there and flag a suspected fake with the “Flag Comment” control on the review. We could not read Healthgrades' own help pages to confirm the current response tool, so check your profile dashboard. Source: Podium: how to manage Healthgrades reviews (third party)
- HIPAA, as healthcare attorneys describe it: a provider's public reply may only make general statements about practices and procedures, and may not acknowledge that an individual was a patient, name them, or discuss their care. Source: Minc Law: removing negative or fake Healthgrades reviews (third party)
- Character limits: none published in the sources we could read for either platform. The three-move reply is three or four sentences by design, so a cap is unlikely to matter. Source: Zocdoc: verified reviews
The templates
Replace every [BRACKETED_PLACEHOLDER] with your specifics before posting - an unedited template is worse than no response.
Positive review (the same rules apply)
Thank you for the kind words. Reviews like this mean a great deal to everyone at [PRACTICE_NAME]. We work hard to make every visit [QUALITY_PRAISED, e.g. “unhurried, with time for questions”], and it's wonderful to hear when that comes through. We appreciate you taking the time to share this. [Note: no “thank you for being a patient,” no “see you at your next appointment,” no treatment references. Warm, and still confirms nothing.]
Negative review about care or bedside manner
Thank you for taking the time to share this feedback. [QUALITY_AT_ISSUE, e.g. “Clear explanations of treatment options” / “Being listened to during a visit”] is a standard we hold ourselves to for everyone we see, and feedback like this is reviewed with our clinical team. Anyone who would like to discuss a specific concern about care at [PRACTICE_NAME] can call [CONTACT_NAME], our [ROLE, e.g. “practice manager”], directly at [PHONE] so we can review the details privately.
Mixed review: great clinician, long wait and front-desk problems
Thank you for this balanced feedback. We're glad to hear the clinical side of the visit met the standard we aim for, and we take the comments about [NON_CLINICAL_ISSUE, e.g. “wait times and check-in”] seriously. Since [MONTH], [CONCRETE_CHANGE, e.g. “we've added a second front-desk position during morning clinic and moved to text-message wait updates”]. Anyone with questions about scheduling or their experience at [PRACTICE_NAME] can reach [CONTACT_NAME] at [PHONE].
Billing or insurance complaint
Thank you for this feedback. Clear cost estimates before treatment, and careful handling of insurance claims, are standards we work to for everyone who visits [PRACTICE_NAME]. Billing questions involve details we can only discuss privately; anyone with a concern about a charge or a claim can call [CONTACT_NAME], our [ROLE, e.g. “billing coordinator”], at [PHONE], and we'll go through the specifics together.
Zocdoc booking mix-up (booked online, the office couldn't find it or the slot was wrong)
Thank you for letting us know about this. Appointments booked online should match what our front desk sees, and when they don't, the result for the person arriving is exactly what you describe. We've reviewed how online bookings sync with our schedule and [CONCRETE_CHANGE, e.g. “now confirm every online booking by phone or text the day before”]. If anyone has a scheduling problem with [PRACTICE_NAME], please call [CONTACT_NAME] at [PHONE] and we'll sort it out directly.
Review you believe is fake (and you still cannot say “you were never our patient”)
Thank you for your feedback. Out of respect for privacy, we don't discuss whether any individual has been seen at [PRACTICE_NAME], or the details of anyone's care, in a public forum, and that applies here as well. What we can say is that [GENERAL_STANDARD, e.g. “accurate records and respectful treatment of every person who contacts us”] is a standard we hold without exception. Anyone with a concern about an experience with our practice can call [CONTACT_NAME] at [PHONE]. [Flag the review through the platform's own report tool separately. The public reply never argues patient status in either direction.]
Do
- Use all three moves every time: acknowledge the feedback, generalize to your standard, invite a phone call to a named HIPAA-trained contact.
- Treat Zocdoc's “Verified patient” label as the platform's statement, not yours; your reply still confirms nothing.
- Flag suspected fakes through the platform (Healthgrades has a flag control on each review; Zocdoc moderates for privacy violations and unverifiable medical claims) and keep the public reply neutral on patient status.
- Have one trained person own responses; a reflexive “sorry your crown failed” from a receptionist is a reportable disclosure.
Don't
- Never confirm or deny that the reviewer is a patient, including by thanking them for “their visit” or referring to “your appointment.”
- Don't correct clinical facts in public; the correction itself discloses treatment details.
- Don't repeat or quote health details the reviewer posted about themselves; their disclosure is not your authorization.
- Don't try to get a Zocdoc review removed by argument or payment; Zocdoc says providers can't pay to alter or remove reviews and only removes those that break its guidelines.
Stop copy-pasting
ReviewReaction drafts replies to every review in your voice - matched to the situation, no brackets to fill. $19/mo, 7-day trial.
Try ReviewReaction