Payment resources for owner-run local businesses

Respond to med-spa reviews without confirming a patient relationship

Review a proposed public response by disclosure question, qualified source and publishing owner. Export tasks without posting a reply or copying patient information.

Updated 2026-10-04 | 5 minute read | By BlueFinch Advisors

Med-spa public-response review checklist

Assign a disclosure question and qualified wording review without posting a reply.

No signup. Enter reference codes, add records and download a CSV. Entries stay in the browser tab. Filled fields do not establish completion, approval or compliance.

Fictional example rows
General response topicProposed generic wordingDisclosure question for reviewResponse-review statusResponse review evidence referenceWording review ownerInternal review dateNext wording action
General feedback acknowledgementThank you for sharing feedback. Please use our private contact route for questions.Review the full wording and intended destinationResponse review recordedWording-review-reference-17Privacy-review-role2026-10-18Inspect approved generic wording before a separate publication decision
Proposed public policy explanationState only an accurate general business policyCheck for implied confirmation of a private relationshipResponse review recordedPublishing-review-role2026-10-19Find the actual review before treating the status as supported
  • Fictional examples. Enter generic field names and internal task references, not personal or clinical information.
  • Filled fields need qualified source review and establish no privacy clearance, consent or approval.
  • No message, data transfer, clinical decision or website change occurs.
  • Reload clears edits. Download only to approved business storage.
Download the fictional example (CSV)
Bright unoccupied waiting room with white seating and an indoor tree.
Photo by rawkkim on Unsplash. Stock photography. Photo license.

A critical review appears online and your team wants to correct the account. Pause the public draft before confirming an appointment, treatment, payment or relationship. A reviewer choosing to publish their own story does not automatically authorize the business to publish private records. Review the proposed response separately from the underlying service concern.

The checklist contains general response topics, fictional wording and source-review tasks. Enter no reviewer names or clinical information. The tool posts nothing and approves no response. Use generic wording here and keep the actual review, private follow-up and publication decision in the appropriate systems under their own permitted access.

Use with this guide

Review publication controls

Check source access and explicit reply approval.

Review information purposes

Keep public and clinical records separate.

Improve the supported public explanation

Answer logistics without discussing a patient.

Med-spa review requests: check contact preferences

Audit med-spa review requests against neutral eligibility and contact preferences. Use the route checklist without confirming a customer relationship in public.

Browse the complete medical spa guides and worksheets.

Answer without publishing the underlying record

Keep the proposed public wording general. Acknowledge feedback and provide the established private contact route for questions. Avoid repeating diagnoses, procedures, appointment dates or payment details, including details you dispute. An accurate general policy still needs review of the complete wording and intended destination before a public response is approved.

Knowing the story is not authorization to publish the story. Investigate the service concern through the approved private channel and authorized records. Keep the public explanation separate from private follow-up notes. Do not paste those notes into a reply draft to demonstrate the business has evidence about what happened.

Use the actual privacy reviewer and source

HHS published a settlement involving a psychiatric provider's disclosure of patient information in responses to negative online reviews. Its scope guidance describes covered entities and information. These sources support reviewing disclosure questions rather than assuming all med spas have identical legal status. Use the actual responsible reviewer for the business and proposed response.

Google advises professional replies and protecting private information. Permission to operate a platform button does not establish permission to disclose private records. Keep the source review and publishing action distinct. Have the responsible reviewer inspect the full draft rather than treating account access or a short sample sentence as clearance.

Sources for this section: HHS: Patient information disclosed in public review responses · HHS: Privacy Rule scope, covered entities and business associates · Google: Professional review replies and protecting private information

Read the draft-review gap

The first fictional row contains a generic feedback acknowledgement, a private contact route and a wording-review reference. The second says response review recorded but lacks its evidence reference. The worksheet flags the missing source. Neither a filled row nor a selected status proves the actual draft was reviewed or approved.

Name the unresolved disclosure question without inventing a person or copying private information. Identify what the reviewer needs to inspect, such as implied confirmation of a relationship in the proposed wording. Obtain the actual source before calling the review complete. The worksheet makes no legal classification or decision about permission to publish.

Handle the concern separately from the rating

Handle the service concern separately from the rating. Do not make ordinary help depend on changing or deleting a review. Disagreement with a complaint is not a platform-policy violation on its own. Inspect any policy concern against the actual content and rule, without promising removal or using a public dispute to reveal private records.

HubSpot documents task owners, due dates and associated records. Use equivalent fields for an owned private follow-up in the appropriate system. A completed task does not prove resolution, a changed opinion or improved rating. Record the actual task outcome and leave the customer's experience separate from internal completion.

Sources for this section: HubSpot: Task owners, due dates and associated records

Check the connected reply workflow

BlueFinch's reputation workspace supports available Google and Yelp analysis, source excerpts and operational follow-up tasks. Google reply drafting requires review and explicit publication approval. The workflow does not publish Yelp replies or remove criticism automatically. Check authorized location access and the connected profile before treating a draft as a live response.

Download the response-review checklist for the responsible staff member. Start with the missing evidence reference and inspect the complete proposed reply. Keep approved public wording separate from private follow-up notes. After any authorized publication, verify the actual destination instead of confusing the saved draft with the live response.

Sources for this section: BlueFinch: Review sources and explicit Google reply publication

Primary sources

BlueFinch last reviewed these sources on October 4, 2026. Payment rules and state requirements can change.

Use this page for general business information. It is not legal, tax, or accounting advice.

Related resources