Reviews are not a vanity metric. For healthcare practices, they're one of the most consequential signals in your local search profile, and they pay back across every channel — GBP rankings, conversion rate on your website, paid ad quality, and the trust calibration the patient does the moment they're considering booking.
What Google actually does with reviews Google reads three signals from your review profile, not one:
-
Volume. How many reviews you have, in absolute terms, vs your local competitors. There's no magic number, but you want to be in the top half for your specialty in your submarket.
-
Recency. Reviews from the last 90 days are weighted more heavily than reviews from three years ago. A practice with 200 ancient reviews and zero recent ones sends a "may be closed" signal. A practice with 80 reviews where 25 came in the last 90 days sends "thriving."
-
Response rate and tone. Whether you reply, how fast, and what you say. A practice that replies to every review (good and bad) within a few days, professionally and without HIPAA leaks, ranks above practices that ignore reviews entirely.
What patients actually do with reviews Eye-tracking studies on healthcare search behavior show patients spend an average of 8-12 seconds on a review profile before deciding whether to click through to the website. They're looking for:
- A 4.5+ star average (4.0 reads as risky, 5.0 reads as suspicious)
- At least 30 reviews so the average feels real
- One or two recent reviews that feel specific (not "great practice!" but "Dr. Jane explained my MRI results in plain English")
- A pattern of professional responses to negative reviews (a single bad review with a thoughtful response actually builds trust)
What HIPAA lets you say in a review response You cannot confirm someone is a patient. You cannot reference any clinical detail. You can:
- Thank a reviewer for their feedback in general terms
- Apologize when something didn't meet expectations
- Invite a private follow-up via phone or office contact
- Decline to confirm or deny that the review is from a patient
Templates that say "Thanks Sarah, we're so glad your knee surgery went well" are HIPAA violations even if Sarah herself wrote a public review confirming her treatment. Your response to the public is held to a different standard than her disclosure to the public.
Building review velocity
The agencies that promise "more 5-star reviews" generally do one of three things, all of them risky or unethical:
- Pay for fake reviews from review-mill accounts. Google detects these. Suspension is the common outcome.
- Filter reviews so only positive ones get posted (this violates Google's review policy explicitly).
- Run review-gating funnels that try to redirect unhappy patients away from public review platforms. Also against policy.
What works:
- A simple, low-friction patient communication flow that asks happy patients to leave a review
- Sent shortly after a visit (when the experience is fresh)
- Routed through Google's official "Ask for reviews" link from your GBP
- Without filtering — if an unhappy patient leaves a 2-star review, that's data your practice needs
Macbach builds this flow into your existing patient communication (text reminder, email follow-up) without any review-gating. Your review profile grows steadily on legitimate signal. Google rewards it.
The number to track Forget "average star rating." Track 30-day review velocity. That's the leading indicator. Average rating is the lagging indicator that follows naturally if velocity is healthy and your patient experience is decent.