Plastic Surgery Reviews: Generation, Response, and SEO Impact

Reviews are the most frequently misunderstood asset in plastic surgery marketing. Practices treat them as either a passive byproduct of doing good work, or as a marketing asset to be inflated through volume campaigns. Both approaches leave significant ranking and conversion value on the table, and both occasionally cross into HIPAA, FTC, or state medical-advertising violations that the practice doesn't realize it's committing.

The rules here are more specific than most practices assume, and they are written down by the people who enforce them. HHS's Office for Civil Rights has settled with or fined medical and dental practices at least four times since 2019 over what they wrote in review replies. Google publishes exactly how a business may and may not ask for reviews. The FTC's rule on consumer reviews has been in force since October 2024. This guide is built on that public record, plus what we see running review programs for medical practices.

When we say reviews, we mean both sides of the work: how new reviews arrive, and what the practice says back in public. If you're the practice manager who inherited the review inbox, you want replies you can post without a second thought. If you're a surgeon who reads every one-star review at night, you want to know which ones to answer and how. And if you run marketing for a multi-surgeon group, you want a request system that produces reviews every month without drifting into anything Google or the FTC would call manipulation.

By the end you'll have a platform priority, a request cadence for consult and surgical patients, reply templates that never confirm anyone is a patient, and two tools that check what your practice is already doing. It runs in four parts: what reviews do for rankings and consults, how to generate them without crossing a line, how to respond to them, and how they tie back to your website.

Start with the question most practices skip: what reviews actually do for you.

What Reviews Actually Do for the Practice

Two distinct functions, often conflated.

Search ranking.

Review count and rating feed local search ranking, particularly the map pack, and most practitioners see recency, response rate, and review-text relevance doing the same. They also feed broader brand-search signals; a practice with strong, current reviews will outrank a practice with stale reviews on direct-name searches and "plastic surgeon [city]" searches. Google's own guidance on how local results are ranked says it plainly: more reviews and positive ratings can help a business's local ranking.

Consultation conversion.

Patients researching plastic surgery read reviews before they fill out a form. The number, recency, and content of reviews directly affect how many qualified visitors become consults. A practice with 80 well-written, recent reviews converts at materially higher rates than a practice with 12 reviews from 2021, even when the websites are otherwise comparable.

These two functions interact, but they are not the same. A campaign that drives review count without quality or recency improves rankings slightly and conversion not at all. If you're a surgeon deciding whether review work deserves staff time, that distinction is the answer. It pays twice only when the reviews are steady and specific. That is why reviews belong inside plastic surgeon marketing from day one rather than bolted on after the website launches.

Platform Priority: RealSelf vs. Google vs. Yelp

Most agencies treat all review platforms as equivalent. They are not. For plastic surgery specifically, the priority order is:

Google reviews.

First priority. Google reviews feed the GBP, which feeds the map pack and the knowledge panel on brand searches. Patients see them first when they search the practice name. Volume and velocity here matter most.

RealSelf.

Second priority for surgeons doing meaningful cosmetic surgery volume. RealSelf has procedure-specific search behavior, where patients researching rhinoplasty browse rhinoplasty surgeons directly on the platform. The Q&A section, the "Worth It" rating, and the surgeon's own answer activity all matter. RealSelf is also the platform where patients post the most detailed, photo-rich, procedure-specific reviews; those reviews often show up in Google search results for the surgeon's name and procedure terms. For how the platform surfaces profiles and what the paid tier is worth, see our RealSelf strategy for plastic surgeons.

Yelp.

Third priority, with caveats. Yelp's filtering algorithm hides legitimate reviews and promotes others in ways that frustrate practitioners. Yelp matters because patients still check it, particularly in California and the Northeast. It is rarely worth aggressively pursuing volume on Yelp; it is worth maintaining a presence and responding to reviews that get through the filter.

Healthgrades, Vitals, RateMDs.

Lower priority for plastic surgery specifically. These platforms over-index on traditional healthcare specialties; plastic surgery patients tend to research elsewhere first. Maintain accurate profiles; don't pour generation effort here.

Facebook reviews.

Tertiary. Some patients use them. Most don't.

Where this changes by practice.

If most of your volume is injectables, lasers, and skin, Google still leads, but RealSelf earns less effort than it does for a surgical practice, because those patients tend to decide from the map pack rather than from procedure forums. If you do significant surgical volume, RealSelf's procedure pages are where your most motivated patients compare surgeons side by side, and it deserves real, ongoing effort.

The practice that drives most of its review-generation effort to Google and RealSelf, with maintenance posture on the rest, is allocating correctly. The practice that runs equal-effort campaigns across six platforms is wasting attention.

Review Generation: The System That Works

The system that produces steady, high-quality review velocity is not complicated. It rests on one rule that a lot of review software quietly breaks: every patient gets the same request.

Every consult patient gets a review request 24 to 72 hours after the visit.

SMS first, email second. The message names the surgeon and links directly to the Google review form, with a RealSelf option for surgical patients.

Surgical patients get two requests, not one.

The first goes out at weeks 4 to 6 for breast, body, and face procedures. By then the patient is past the hard early recovery and can describe the consultation, the care, and the healing. The second goes out once the result has settled. That is often around six months for facial work, and closer to a year where swelling or scars take longer to mature. The early request produces an experience review. The late one produces an outcome review, which is the one a prospective patient is actually looking for.

If your practice is mostly non-surgical, the result shows within days. One request shortly after the visit is right, because there is no later state to wait for. If you do both, run both cadences. Route each patient by procedure, not by whichever list is easier to send.

The request is from a person, not a brand.

"Hi [name], it's [coordinator] from Dr. [surgeon]'s office. We hope you're feeling great. If you're willing, we'd love a Google review, it really helps other patients find us. [link]" outperforms automated brand messages by a wide margin.

There is no incentive offered.

No discount, no gift card, no entry into a drawing. Google's review policy bars incentives for posting any review, positive or negative, and the FTC's consumer reviews rule separately bans incentives tied to what the review says. State medical-advertising rules can add limits of their own. This is non-negotiable.

Everyone gets the same public link, and everyone gets a private line too.

Offer a call with the practice manager to anyone with a concern, and fix what you can. But the review link goes to every patient, whatever they said about their visit. Sending it only to patients who report a good experience is review gating. Google's policy bars businesses from selectively soliciting positive reviews. The FTC has said gating could violate the FTC Act, even though its reviews rule does not name it.

No review quotas for staff.

Google's policy names asking staff to solicit a certain number of reviews as a violation. Measure the process instead: the share of patients who got their request on time.

A healthy plastic surgery practice on this system generates 8 to 25 new Google reviews per month, with 60 to 80% of consult patients responding to the request and 20 to 40% leaving a review. Those numbers vary by practice culture and consult volume; the trend matters more than the absolute number.

Say you run a breast-heavy practice that texts the review link at the one-week post-op visit, because that is when patients are in the building. The reviews that come back are about swelling and a stubborn drain. A few are three stars from patients who were simply sore that week. Move the first ask to week five and add a second at six months, and the same patients write about how the consultation felt and how the result looks now. Timing changes what a review says, not just whether it arrives.

The Lines a Review Program Cannot Cross

Four habits get plastic surgery review programs into trouble. All four are common enough to ship as default settings in review software: gating, paying for reviews, scripted or insider reviews, and gag clauses in patient paperwork.

Gating.

Asking only happy patients, or letting software route unhappy ones to a private form while happy ones see the Google link, is the selective solicitation Google's policy prohibits. It does not become acceptable because a tool made the choice.

Incentives and quotas.

No reward of any kind for a review, and no count targets for staff. Both are named in Google's policy, and a sentiment-conditioned incentive also breaks the FTC rule.

Scripted, insider, and fake reviews.

The FTC's rule on consumer reviews and testimonials, in force since October 21, 2024, bans fake reviews and undisclosed reviews from insiders, and knowing violations can draw civil penalties of up to $53,088 each. Google treats a review from an employee or a relative as a conflict of interest and removes it.

Gag clauses.

The Consumer Review Fairness Act of 2016 voids form-contract clauses that bar customers from posting honest reviews. In July 2024, a Seattle plastic surgery practice and its surgeon were made to pay $5 million in a case brought by Washington's attorney general. The state found they had made more than 10,000 patients sign agreements restricting negative reviews, and had posted fake positive ones. Patients talk about this openly: plastic surgery forums carry threads warning one another about surgeons who hand over a review-restricting agreement before surgery.

Picture a review tool that texts every patient "How was your visit?" with two buttons. Tap the happy face and you land on Google. Tap the unhappy one and you land on a private feedback form. It looks like service recovery. It is exactly what Google's policy describes. The fix is one setting: show every patient both options. If you run marketing for a multi-surgeon group, check the software's settings before you check anyone's wording.

Nine questions cover the whole request process, including what your software does on its own:

Responding to Reviews Without Violating HIPAA

This is where most practices and many agencies create legal exposure they don't recognize.

The HIPAA reality: a patient writing a review online has not authorized the practice to confirm or deny their patient status, identify them, or discuss their treatment. Even if the patient has named themselves, the practice cannot reciprocate without explicit, documented authorization.

The enforcement record is short and consistent. HHS's Office for Civil Rights settled with a New Jersey psychiatric practice for $30,000 in 2023 after it answered a negative online review with patient information. A California dental practice paid $23,000 in 2022 over Yelp replies. According to the complaint, those replies added patients' full names where reviewers had used nicknames, plus visit and insurance details they had never posted. These cases started in the reply box, not in a data breach. If you're the surgeon who answers reviews personally, late at night, this is the section to reread before the next one.

Common HIPAA violations in review responses:

• "Thank you for trusting us with your rhinoplasty, [Name]. We're so glad your recovery is going well." (Confirms patient status, identifies the patient, confirms procedure.)
• "We're sorry your experience didn't meet expectations. Your tummy tuck was a complex case and we did our best." (Discloses procedure and treatment context.)
• "We don't have a record of this patient." (Discloses patient status by negation.)

The compliant response template, for positive reviews:

"Thank you so much for the kind words! Reviews like this mean a great deal to our team. We appreciate you taking the time."

The compliant response template, for negative reviews:

"Thank you for the feedback. Without confirming any patient relationship, we'd welcome the chance to speak directly so we can understand and address your concerns. Please call our practice manager at [number]."

The compliant response template, for unfair or false reviews:

"Thank you for sharing this. We take every concern seriously, and privacy law prevents us from discussing anyone's care in public, including whether someone has been seen here. If you'd like to talk it through, please call our practice manager at [number]."

Avoid the line "this account differs from our records." It sounds neutral, and it tells every reader that the reviewer has a record with you.

The pattern is consistent: warm, brief, never confirms patient status, always offers a private channel for resolution.

Picture a practice manager facing a two-star review she is sure came from a competitor. She types "We have no record of you as a patient" and posts it. It feels safe, because the reviewer is not a patient. But the next time a real patient complains and gets the generic reply instead, every careful reader can see the difference. Denying for non-patients confirms the patients by elimination, which is why the reply has to be the same every time.

Most practices already have a backlog of replies written before anyone checked them. The linter below reads the ones you have already posted. To write a new reply from scratch, the Compliant Reply Composer in our guide to HIPAA rules for medical marketing builds one for each type of review.

Negative Review Handling

Three rules that hold up.

Respond within 48 hours.

Slower responses look indifferent. A reply fired off in the first hour, before anyone has read the review twice, tends to read as defensive.

Never argue.

Even when the review is unfair, false, or written by a competitor, public arguments make the practice look worse than the original review did. The audience for the response is not the reviewer; it is the next patient reading.

Move it offline.

Every negative review response should include a phone number and an invitation to call. Some patients accept the invitation and the situation resolves. Most don't. The patients reading the responses see a practice that is willing to engage privately, which is what they're actually evaluating.

When you can't tell whether the reviewer is a patient,

post the same generic reply you would post for anyone. Denying patient status is still discussing it. Then report the review through Google's flagging flow, where the conflict of interest and fake engagement categories cover competitor and employee reviews. When the reviewer clearly is a patient, the private call matters more than the public reply, so the practice manager should reach out the same day.

For genuinely defamatory or fake reviews, the path is platform escalation: Google's review removal process, RealSelf's reporting tools, Yelp's content guidelines. The success rate is low but not zero. Documented cases of fake reviews from named individuals, or reviews that violate platform-specific content policies, can be removed.

What does not work: paying reputation management firms to bury reviews with fake positive ones, suing patients for negative reviews (which produces a Streisand-effect cascade and is increasingly disallowed by anti-SLAPP statutes), or attempting to incentivize the patient to remove the review.

Say a one-star review complains about a surprise on the final bill, and the office replies with the appointment date and the balance owed to set the record straight. The reviewer edits the review to add that the practice just broke federal privacy law in public. The next patient reading now has two problems to weigh instead of one. Patients describe exactly this in public forums. The defensive reply became the worst review on the page.

What Reviews Should Look Like Without Scripting Them

Scripted reviews are detectable, both by the platforms and by patients. Reviews that all sound the same get filtered, and patients reading them register the artificiality even when they can't articulate it.

Real reviews vary in length, tone, specificity, and grammar. They mention specific moments: the consultation, a particular nurse, a recovery experience, a result. They sometimes include mild criticism alongside praise. They are written by humans with their own voice.

The practice should request reviews; it should not draft them. The most useful prompt language in a review request is something like: "If you're willing, we'd love to hear about your experience, what stood out, how the consultation went, whatever feels real to you." That produces useful, specific, ranking-relevant content. "Please mention Dr. Smith and your facelift in your review" produces filtered reviews and patients who feel manipulated. It also runs against Google's policy, which bars businesses from soliciting reviews with specific content, including content that names a staff member.

Within the request, you can mention that procedure-specific reviews help other patients find the practice. That's true and ethically clean. You cannot dictate the content. For the elements that make a review useful to patients and to search, and the open questions that draw them out, see what a useful patient review actually says.

Tying Reviews Back to Local SEO and the Website

The reviews that do the most ranking work are the ones that mention specific procedures, specific surgeons, and specific locations in their own words. They help your listing look relevant for those exact searches, and they are the one part of review content you can invite but never write.

Reviews also belong on the practice's own website, because patients choosing between two surgeons read them there. What does not belong there is the star markup many practices add in hopes of stars in search results. Google stopped showing review stars for businesses marking up reviews about themselves in 2019. In our study of 101 top-ranking breast augmentation pages, 37 of the pages ranking first still carried AggregateRating markup, with claimed review counts from 1 to 2,359, and none of it produces stars. Display the reviews; skip the markup.

Replies matter too, for a different reason than most guides claim. Google says helpful replies can help a business stand out. It does not say replied-to reviews rank higher or show up first. Treat your response rate as a trust signal for the next patient, not as a ranking lever.

There is a newer, third job. AI answers about a practice lean on third-party sources, and review platforms are among them. In Brown Bear's AI-visibility audits, what surprises practice owners most is how much of their visibility and sentiment is driven by third-party sites they have never logged into, review profiles included. That is why optimizing for AI answers about your practice starts with the review profile, not the website.

What to Do Next

1. Audit your review velocity over the last 12 months, Google and RealSelf first. If it's not steady, the request system isn't working.
2. Run your last 30 review replies through the Reply Risk Linter. If any confirm patient status, edit them this week.
3. Take the Review Program Compliance Check, then read your intake paperwork. Any gating, incentive, or review-restricting clause comes out before the next request goes out.
4. Build both post-op requests into the surgical workflow. Weeks 4 to 6 and again once the result settles, by SMS, from the coordinator's name, to every patient, with no incentive.

A plastic surgery practice with 80 to 200+ recent, well-written, varied reviews on Google, plus an active RealSelf presence, plus a clean response history is winning the comparison battle on every brand search and every map-pack query. That position took 12 to 24 months of disciplined work to build. It does not erode quickly. And it cannot be replicated by a competitor with budget alone.

References

1. Federal Trade Commission. (2023). FTC's Endorsement Guides: What People Are Asking. FTC. https://www.ftc.gov/business-guidance/resources/ftcs-endorsement-guides-what-people-are-asking

2. Google LLC. (2025). Contribute reviews on Google Maps. Google Maps Help. https://support.google.com/maps/answer/6230175

3. RealSelf. (2025). About RealSelf. RealSelf. https://www.realself.com/company

4. U.S. Department of Health and Human Services. (2025). Health Information Privacy (HIPAA). HHS. https://www.hhs.gov/hipaa/index.html

5. U.S. Department of Health and Human Services, Office for Civil Rights. (2023). HHS Office for Civil Rights Reaches Agreement with Health Care Provider in New Jersey That Disclosed Patient Information in Response to Negative Online Reviews. https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/manasa/index.html

6. U.S. Department of Health and Human Services, Office for Civil Rights. (2022). New Vision Dental Resolution Agreement and Corrective Action Plan. https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/new-vision-ra-cap/index.html

7. Google LLC. (2026). Maps user contributed content policy: prohibited and restricted content. https://support.google.com/contributionpolicy/answer/7400114

8. Google LLC. (2026). Tips to improve your local ranking on Google. Google Business Profile Help. https://support.google.com/business/answer/7091

9. Google Search Central. (2019). Making Review Rich Results more helpful. https://developers.google.com/search/blog/2019/09/making-review-rich-results-more-helpful

10. Federal Trade Commission. (2024). Consumer Reviews and Testimonials Rule: Questions and Answers. https://www.ftc.gov/business-guidance/resources/consumer-reviews-testimonials-rule-questions-answers

11. Federal Trade Commission. Consumer Review Fairness Act: What Businesses Need to Know. https://www.ftc.gov/legal-library/browse/statutes/consumer-review-fairness-act

12. Washington State Office of the Attorney General. (2024). AG Ferguson: Plastic surgeon must pay $5 million for illegally manipulating consumer ratings. https://www.atg.wa.gov/news/news-releases/ag-ferguson-plastic-surgeon-must-pay-5-million-illegally-manipulating-consumer

---

Related reading: Plastic Surgery Local SEO · About page best practices · How Plastic Surgery Practices Fill Their Consultation Calendar

Work with Brown Bear on Your Practice's Review Strategy

A review profile that drives ranking and conversion doesn't build itself. It's the result of a systematic post-op workflow, HIPAA-compliant response practices, and a platform strategy focused on the channels that actually matter. Brown Bear Digital builds and manages review generation systems for plastic surgery practices, integrated directly into the local SEO and on-site content strategy that turns review authority into map-pack rankings and qualified consultations. If your review velocity has stalled or your response approach is inconsistent, reach out and we'll walk you through what a working system looks like.