How to Ask Clients for Reviews (While Staying HIPAA Compliant)
Online reviews are among the most influential factors in a potential client decision to contact a therapist. A strong collection of positive reviews builds trust before the first phone call, and review quantity and quality directly impact your local search visibility. However, the unique ethical and legal considerations of mental health practice — particularly HIPAA compliance — make review generation more nuanced for therapists than for other businesses. The good news is that with the right approach, you can build a robust review presence without ever compromising client confidentiality.
Understanding the HIPAA Boundaries
HIPAA restricts you from acknowledging that someone is or was a client. This means you cannot publicly confirm a therapeutic relationship, even if a client has already disclosed it through a review. When responding to reviews — positive or negative — you must use general language that does not confirm or deny a clinical relationship. A response like “Thank you for sharing your experience” is appropriate, while “It was great working with you on your anxiety” is a HIPAA violation. Understanding this boundary clearly is the foundation for an ethical review strategy.
Creating a Natural Review Request Process
The most effective time to request a review is when a client expresses satisfaction with their progress — during or after a session where they acknowledge positive outcomes. In that natural moment, you might say: “I am really glad you are feeling progress. If you are comfortable, leaving a review online helps other people who might be looking for the kind of support we offer. Totally optional, of course.” Provide a simple way to follow through — a card with a QR code linking to your Google review page or a follow-up email with a direct review link. Never pressure clients or make reviews feel obligatory.
Making It Easy to Leave a Review
Friction is the enemy of reviews. Create a short, direct link to your Google review page (Google provides these through your Business Profile dashboard) and share it via the simplest possible channel. Some practices include a review link in their email signature, on their post-session follow-up emails, or on a small card at the front desk. The fewer steps between intention and action, the more reviews you will receive. Focus on Google reviews first — they have the most impact on search visibility and are the most trusted platform for healthcare reviews.
Responding to Reviews Properly
Respond to every review to show that you value feedback and are engaged. For positive reviews, thank the reviewer generally without confirming clinical details: “Thank you for taking the time to share your experience. It means a lot.” For negative reviews, respond calmly and professionally, expressing that you take all feedback seriously and inviting the person to contact you directly to discuss their concerns. Never argue, defend, or disclose any information. Your responses are read by future potential clients, so they serve double duty as reputation management and marketing. For detailed response templates, see our review response guide.
Building a Consistent Review Pipeline
A sustainable reputation management strategy does not rely on occasional review bursts — it builds a steady, ongoing stream of authentic reviews. Integrate review requests into your regular client workflow. Train front desk staff on how to mention reviews naturally. Track your review count monthly and set a goal of two to four new reviews per month. Over a year, that steady pace builds a significant collection of social proof that elevates your practice above competitors who neglect this crucial element of their online presence.