How treatment centers should respond to online reviews

Families read your reviews before they call. So do referral partners, and so do the clinicians you want to hire. For most businesses, replying to reviews is simple: thank the happy ones, apologize to the unhappy ones, fix the problem. For a treatment center it's different, because the moment you confirm that a reviewer was your client, you may have disclosed health information, even if they posted about themselves first.

This guide covers why review replies are a privacy issue for treatment programs, a five-step process your team can follow, reply templates, the federal rules on fake and paid reviews, and how reviews fit with the rest of your feed. It's general information, not legal advice. Check your own policies with your privacy officer or attorney.

Why a review reply can become a privacy problem

When someone writes "My son was at this rehab for 30 days and nobody called us back," the natural reply is to explain: what happened, what the policy is, why the call didn't happen. Every one of those details confirms a person was in your care.

This has already cost providers money. In 2023, the HHS Office for Civil Rights announced that Manasa Health Center, a New Jersey provider of adult and child psychiatric services, paid $30,000 after it posted a response to a patient's negative online review that disclosed the patient's protected health information (HHS announcement). The settlement also came with a corrective action plan.

Substance use programs have a second layer to think about. Programs covered by 42 CFR Part 2 have their own confidentiality rules on top of HIPAA. We cover both in HIPAA and 42 CFR Part 2 for social media. The short version for reviews: treat every reviewer as someone whose status you can't confirm, deny or discuss in public.

A five-step process for every review

Write this down and give it to whoever has access to your Google Business Profile and Facebook page.

1. Read it, then wait. Don't reply in the moment. Angry or defensive replies are where most disclosures happen. A same-day reply is fine; a two-minute reply usually isn't.
2. Flag anything urgent. If a review describes a safety concern, a staff conduct issue or someone in crisis, send it to your clinical director or compliance lead right away. The public reply can wait; the internal follow-up can't.
3. Use a general reply. Thank them, say you take feedback seriously, and invite them to call a named role (not a named client) at your program. Never mention dates, levels of care, staff they worked with, or anything about the person.
4. Take it offline. If the reviewer calls, the conversation happens in private, by your normal privacy rules. Don't post an update afterward saying it was resolved.
5. Log it. Keep a simple record of the review, the reply and who approved it. If a review keeps coming up, that's information for your operations team, not your marketing team.

Reply templates you can adapt

These work because they say nothing about the reviewer. Swap in your own program name and phone number.

For a positive review:

Thank you for taking the time to share this. Our team works hard to be there for every family who calls. If you ever need us, we're at (555) 555-0100.

For a negative review:

Thank you for this feedback. We take every concern seriously, and our privacy rules mean we can't discuss anyone's care here. Please call our program director at (555) 555-0100 so we can listen and look into it.

For a review that may not be from a client at all:

Thank you for sharing your concerns. We protect the privacy of everyone who contacts us, so we can't discuss any details here. If you'd like to talk, please call (555) 555-0100.

Notice what's missing: no "we're sorry your son's stay," no "according to our records," no "as we explained to you." The same reply works whether or not the person was ever a client, which is exactly the point.

What to avoid

• Confirming or denying. "We have no record of you" is a disclosure too. So is "you left against medical advice."
• Correcting the facts in public. Even when a review is unfair, the public reply isn't the place to set the record straight.
• Threatening the reviewer. The FTC's Consumer Reviews and Testimonials Rule bars using unfounded legal threats, intimidation or certain false public accusations to prevent or remove negative reviews (FTC announcement).
• Paying or rewarding for reviews. The same rule bars offering incentives conditioned on a review saying something positive or negative.
• Fake or insider reviews. The rule bars fake reviews and undisclosed reviews from officers, managers and other insiders. It also bars buying fake followers or views to misrepresent your influence. See the FTC's questions and answers on the rule for detail.
• Reposting reviews as testimonials. Sharing a client's review on your Instagram or website turns it into your own marketing of a person's treatment. The safer default is to leave client reviews where they were posted.

Who else reads your reviews

Families aren't the only audience. A hospital social worker deciding where to send a discharge, or an outpatient therapist choosing a higher level of care for a client, will often look at your Google Business Profile before they pick up the phone. Calm, consistent, private replies tell them your team handles hard moments well. Our guide to Google Business Profile for rehab centers covers the rest of that profile, and LinkedIn for treatment centers covers how referral partners check you.

Many states also publish their own provider lookups that families use next to reviews. In Maine, for example, the Department of Health and Human Services points residents to Treatment Connection, a free directory of substance use and mental health services; see our Maine page. Make sure your name, address and phone number match everywhere a family might find you. Every state has its own page in our state-by-state guide.

Reviews and your feed work together

A family who reads one unhappy review and then finds a feed with a post from this week, real staff, and a clear explanation of how admissions works has more to go on than the review alone. A family who finds a feed that stopped posting last spring has less. You can't control what people write about you, but you can control whether your own pages look current, consistent and real. Our treatment center post ideas are a good place to start.

If you also run ads: your ads bring families to your landing page. Before they call, most look you up: Google, Instagram, Facebook, TikTok. If your feeds look dead, the click you paid for loses trust. Read how to protect your ad spend.

How FirstCall helps

FirstCall Social was founded by a treatment center owner, so privacy is built into every post we make. We create the ideas, then write, design, check and publish your organic posts every week, built from a fact sheet you confirm, with a privacy and compliance check on every post. We never write, buy or post reviews, and we never use client stories. One flat monthly fee: Essentials $997, Core $1,997, Premium $2,997 or Elite $4,997, month to month. Compare plans on our pricing page.

Frequently asked questions

Can a treatment center reply to a negative review at all? Yes. You can thank the reviewer, say you take feedback seriously and invite them to call a named role at your program. What you can't do is confirm they were a patient or discuss anything about their care in public, even to correct the record.

What if the review is false or from someone who was never a client? Reply the same way you would to any review, without confirming or denying anything about the person. If you believe it breaks the platform's rules, report it through the platform's own process. Never threaten the reviewer.

Can we ask our clients and alumni for reviews? Ask your privacy officer or attorney first, and never offer a gift or reward for a review. Some programs choose not to ask clients at all and focus on reviews from referral partners and families who choose to post on their own.

Does FirstCall write reviews for treatment centers? No. We never write, buy or post reviews. FirstCall is organic social media only, for one flat monthly fee, and never per lead, call or admission.

See your feed first

Tell us about your center and we'll build you a free sample week from your website, so you can see what your pages could look like before you decide anything. Get a free sample week.

If you're in crisis, call or text 988.

This article is general information, not legal advice. Talk to a healthcare attorney about your center.