Why Dermatology Reviews Are Harder to Get Right Than They Look
Pull up the Google profile of a busy dermatology practice and you’ll usually see the same pattern. The star average is fine and there are a few hundred reviews. The newest ones are one-star complaints about a six-week wait for a skin check or a bill nobody expected. The five-star reviews are there too, but they’re three months old and say “great doctor” and nothing else.
That profile is marketing your practice right now whether anyone manages it or not. A dermatology patient testimonial and review strategy puts someone in charge of it. It’s also one of the few marketing channels where a practice can get into regulatory trouble with a single reply.
A dermatology patient testimonial and review strategy is a written system for asking every patient for honest feedback, replying to public reviews without revealing health information, and turning consented patient stories into marketing that describes the experience without promising outcomes. It covers Google reviews, third-party review sites, website testimonials and before-and-after content.
Dermatology has a problem most specialties don’t. Many practices are two businesses under one roof. One is medical dermatology (skin cancer screenings, acne, eczema, psoriasis). The other is cosmetic work (neurotoxin injections, fillers, laser treatments). The two groups of patients find you in different ways, read different review sites and care about different details. A strategy built around one group usually shortchanges the other.
Medical and Cosmetic Patients Read Reviews for Different Reasons
A patient looking for a medical dermatologist has usually been referred, or is working from an insurance directory. Their questions are practical. Can I get in before summer? Does the front desk call back? Will the doctor explain what’s going on or rush me out? They skim your Google reviews for those answers and then call.
A cosmetic patient is paying out of pocket and shopping around. They compare injectors by name. They read Google, then RealSelf, then scroll your Instagram, then return to Google. They want to know who did the treatment, whether the visit felt rushed, and whether the practice is honest about what’s realistic.
| Medical dermatology patient | Cosmetic dermatology patient | |
|---|---|---|
| What they check first | Availability, insurance, staff responsiveness | Provider name, experience, consultation style |
| Where they read | Google, Healthgrades, Zocdoc, insurer directories | Google, RealSelf, Instagram, practice website |
| What makes a review useful to them | Mentions of wait times, communication, billing clarity | Mentions of the provider by name and how the consultation went |
| Best moment to ask | Same day, right after checkout | At the follow-up or touch-up visit, when the relationship is established |
| Who should ask | Front desk, backed up by an automated text | The provider or aesthetician, backed up by a text |
My take, which cuts against how most dermatology practices spend their reputation budget: the medical side deserves more attention than the cosmetic side. Cosmetic reviews feel more valuable because each cosmetic patient brings in more revenue. But medical visits make up most of the volume, and wait-time complaints from medical patients are what drag down the average. A cosmetic patient comparing injectors sees that 3.9 too. If the medical side has a bad reputation, the cosmetic side pays for it.
A side note on individual provider listings. Google allows public-facing practitioners to have their own Business Profiles. For an injector with a loyal following, that can help, because patients search for the provider’s name. The tradeoff is that reviews get split between the practice profile and the provider profile, and it gets messy when that provider leaves. For most practices, one strong practice profile beats five weak provider profiles.
How Do You Get More Dermatology Reviews Without Breaking Google’s Rules?
The rules are simpler than most practices think, and vendors break them more often than practices do.
Google’s review policies prohibit selectively asking happy customers for reviews (the industry calls this review gating) and prohibit offering incentives in exchange for reviews. The FTC’s rule on consumer reviews and testimonials, which took effect in October 2024, bans fake reviews, bans buying reviews, restricts undisclosed reviews from employees and insiders, and bans incentives tied to positive sentiment. Yelp is stricter still and discourages businesses from asking for reviews at all.
In practice, that gives you five working rules:
- Ask every patient in a visit category, or none of them. No “were you happy?” screen before the review link.
- No discounts, gift cards, raffle entries or free add-ons for leaving a review.
- Staff and their families don’t review the practice. Tell your team this in writing.
- Don’t tell patients what to write. You can mention that naming their provider helps other patients, and leave the rest to them.
- Send Google review requests freely. Don’t send patients to Yelp.
The mechanics that produce steady volume
Most dermatology practices with thin review profiles don’t have a satisfaction problem. They just rarely ask. A front desk that remembers to mention reviews on slow afternoons will never keep up with a busy clinic day.
So automate the baseline. Connect your practice management system to a review request tool so every eligible patient gets a text within a couple of hours of checkout, with a direct link to your Google review form. Then add a human ask on top of it. For cosmetic patients, the provider saying “if you’re happy with how today went, a Google review helps other people find us” beats any text message.
Here’s the math on volume. Say you run a 5-provider dermatology practice seeing about 600 visits a week. If only 3% of those patients leave a review, you get 18 new reviews a week, which is more than 900 a year. At that pace, a handful of angry wait-time posts stops setting the tone of your profile. Google also lists review count and score among the factors it uses for local ranking, so steady volume helps you show up in the map results as well.
What can go wrong with automated asks
Two issues come up again and again in dermatology.
First, the text itself can disclose too much. “Thanks for coming in for your Mohs surgery today!” is a treatment detail sent to a phone that a spouse or coworker might see. Keep the message generic: “Thanks for visiting [Practice Name] today. We’d appreciate your feedback on Google.”
Second, timing around sensitive visits. Asking for a five-star review the same afternoon someone had a biopsy and is waiting on pathology results feels tone-deaf. Leaving certain visit types out of automated asks can be reasonable. The exclusion has to be based on the type of visit, never on how the patient seemed to feel, and it has to be written down and applied every time. Run the rule past your compliance counsel before you switch it on.
How Should a Dermatology Practice Respond to Reviews Under HIPAA?
Patients can say anything they want about their own care in a public review. Your practice can’t confirm any of it. That imbalance causes most reputation-related HIPAA problems.
If a patient writes “Dr. Patel removed a basal cell carcinoma from my nose and the scar is terrible,” and your reply mentions the procedure, the scar or the fact that they were seen, you’ve confirmed a patient relationship and disclosed health information. The HHS Office for Civil Rights has brought enforcement actions against healthcare practices, including dental practices, over review responses that revealed patient information. Those cases ended in financial settlements and years of required compliance monitoring.
Here’s how that difference reads in practice:
- Revealing: “We’re sorry your scar healed that way. As we discussed at your follow-up, that’s within the normal range for your procedure.”
- Safe: “We take every concern seriously and would like to talk with you directly. Please call our practice manager at [number] so we can help.”
The same rule covers positive reviews, and practices trip over it more often there because the reply feels friendly. “So glad your acne cleared up!” is a disclosure. “Thank you for the kind words, our team appreciates it” is not.
A response process that holds up
Pick one person to own review responses. In a small practice that’s usually the practice manager. In a multi-location group it’s often someone in marketing working with the compliance officer. Give them a short library of approved responses for the common situations: positive review, wait-time complaint, billing complaint, clinical complaint, and reviews that look fake or come from someone who was never a patient.
Aim to reply within two business days. Clinical complaints should go to a provider or the medical director before anyone writes a public reply, since there may be a real patient safety or care issue behind the review that needs a phone call more than a response.
Also, never offer a refund, a free treatment or anything else in exchange for someone changing or removing a review. That falls under the review suppression practices the FTC rule targets. Flag reviews to Google only when they break Google’s policies (spam, conflicts of interest, off-topic content). Google won’t remove a review because it’s negative, and reporting every bad review just wastes your manager’s time.
Turning Patient Stories Into Testimonials Without Overstating Results
Reviews belong to the patient. Testimonials are marketing you choose to publish, so your practice carries the legal responsibility for what they say and imply.
A useful way to think about it is a ladder. Each step up is more persuasive, carries more risk and requires more paperwork.
| Asset | Who controls it | What you need before using it | Main risk |
|---|---|---|---|
| Public review on Google or another site | The patient | Nothing to leave it up. Replies must follow HIPAA rules. | A reply that confirms the patient relationship or discloses care details |
| Review quoted on your website or in ads | Your practice | Many healthcare attorneys recommend a signed authorization, because republishing it confirms the person is your patient | Treating a public review as free to reuse |
| Written testimonial | Your practice | Signed HIPAA marketing authorization and a clear statement of where it will appear | Wording that implies guaranteed or typical results |
| Video testimonial | Your practice | Authorization, a release covering the video, and a review of what the patient says on camera | Outcome claims made in the patient’s own words that you then publish |
| Before-and-after photos | Your practice | Authorization, consistent photo conditions, no retouching, results disclosures, and a check against your state medical board’s advertising rules | Implying that one result is typical, or state-specific restrictions |
Experience claims versus outcome claims
The safest testimonials talk about the experience. “Dr. Nguyen spent twenty minutes walking me through my options and never pushed me toward anything” tells a prospective cosmetic patient what they want to know, and it makes no promises about results.
Outcome testimonials are where practices get into trouble. Under the FTC’s Endorsement Guides, a testimonial describing a specific result can be read as a claim that the result is typical. If it isn’t, the ad needs to disclose clearly what patients can generally expect. Many states also have their own rules for testimonials and before-and-after images in medical advertising. Treat every outcome-focused testimonial as something your compliance counsel reviews before it goes live. Don’t assume that because a patient said it, you can publish it.
Material connections and invented stories
If a patient got a free or discounted treatment in exchange for a testimonial, or is an employee, a friend of a provider or a paid influencer, that connection has to be disclosed clearly wherever the testimonial appears. The same applies to the aesthetician who posts her own filler results on the practice’s Instagram.
And skip AI-written testimonials, composite “patient stories” and stock photos presented as patients. The FTC rule explicitly covers fake reviews and testimonials, including ones attributed to people who don’t exist. Beyond the legal risk, patients can tell. A testimonial page that sounds like a brochure makes people trust you less.
How to collect testimonials people want to read
The best source is a patient who has already left a detailed, positive Google review without being asked for one. Have your practice manager reach out, thank them, and ask whether they’d be willing to be featured. Walk them through the authorization form and let them read the final version before it’s published. Many will say no, and that’s fine. Two or three honest, specific testimonials per service line outperform twenty vague ones.
Filtered Review Funnels and Revealing Replies: How This Goes Wrong
Say you run a 3-location dermatology group and sign up with a reputation software vendor. The onboarding call sounds great. Patients get a text asking them to rate their visit from one to five. Fours and fives go to Google. Ones through threes go to a private feedback form “so you can fix the problem internally.” Your star rating climbs within two months.
That setup is review gating, and Google prohibits it. If it gets flagged, Google can remove reviews collected that way, and your profile’s standing is at risk. The FTC has also taken action against companies that suppressed negative reviews to make their ratings look better. Your practice ends up with a rating it can’t defend, a vendor contract it’s still paying on, and a profile that may drop back below where it started. Plenty of reputation tools still ship with gating turned on by default. Log in and check yours.
The second failure is quieter and costs more. A front desk manager who cares about the practice replies to an angry review with the facts: the patient missed two appointments, the biopsy result was benign, and the provider explained the scar risk at the consultation. Every word of it is true, and every word of it discloses protected health information. A single complaint to HHS about a reply like that can trigger an investigation that costs more in legal fees and staff time than the practice’s whole marketing budget for the year.
The third failure is a testimonial page that promises too much. “Clear skin in 8 weeks!” with a single dramatic before-and-after, no disclosure and no signed authorization on file. Nobody notices it for a while. Then a competitor, an unhappy patient or a state board reviewer does.
All three share a root cause. Reputation got treated as a marketing task, when it’s really a marketing task, a compliance task and a front desk task at the same time. The practices that get it right put all three in the same room once a quarter.
Your Dermatology Review Strategy Action Plan: This Week, This Month, This Quarter
This week
- Log into your review request software and confirm there’s no satisfaction screen before the Google link. If there is, turn it off.
- Read your last 50 review replies. Mark any that mention a condition, treatment, visit date or confirm the person was seen. Edit or delete them.
- Pull the wording of your automated review text and strip out anything that names a procedure.
- Send your team a one-paragraph note: staff and family don’t review the practice, and nobody offers anything in exchange for a review.
This month
- Set up automated review requests for every eligible visit, with any visit-type exclusions written down and approved by counsel.
- Train cosmetic providers to make a verbal ask at follow-up visits.
- Assign one owner for review responses, build the approved response library, and set the two-business-day standard.
- Have your compliance counsel draft or review a HIPAA marketing authorization form for testimonials and photos.
This quarter
- Collect two or three authorized, experience-focused testimonials for each major service line and put them on the matching service pages.
- Audit every before-and-after image on your site and social accounts for authorization, consistent photo conditions and state-specific disclosure requirements.
- Track three numbers monthly for each location: new reviews, average rating over the trailing 90 days, and median response time.
- Decide whether any provider has enough of a following to justify an individual Google profile, knowing what that does to review volume on the main profile.
We’ve written separately about dermatology SEO and Google Business Profile optimization for dermatology practices. In short, reviews feed both, so improvements here also show up in your local rankings.
If you’d rather have someone else do the audit, book a free strategy call with PatientProcure. We’ll review your Google profile, your reply history and your review request setup, and show you where your practice is losing patients or taking on compliance risk before anyone picks up the phone.