Med Spa Google Reviews: A Compliant Request System

A med spa sells something clients cannot judge from a menu. They are deciding who to trust with their face, their skin or their body, and many of them look at Google before they call. So the question is not whether to collect reviews. It is how to ask in a way that is honest, repeatable and safe for your Google Business Profile.

Automation helps with the repeatable part. A message that goes out on a schedule does not depend on a busy front desk remembering at six in the evening. It also makes it easy to do the wrong thing at scale, and one popular version of this workflow does exactly that.

In short

Ask every client, with the same message on the same schedule. Sending satisfied clients to Google and unhappy ones to a private form is review gating, and Google's policy prohibits selectively soliciting positive reviews.
Never offer anything in exchange for a review: no discount, no free add-on, no prize draw. Google prohibits it, and the FTC's rule bars incentives tied to a particular sentiment.
Reply to every review, and never confirm that a reviewer was a client or mention a treatment. The U.S. Department of Health and Human Services has settled cases over exactly that.
Let automation do the dull parts: send the request on time with a direct link, and flag new reviews so a person replies. It should not write reviews, filter reviewers or post replies to complaints on its own.

Correction to an earlier version of this post

The version published on April 27, 2026 recommended a satisfaction check-in before the review request, so that requests would mostly reach clients who seemed pleased with their visit. That is review gating. We removed it and rewrote the post around asking every client. If you built a workflow from the old advice, use the test in the next section to check it.

What reviews do for a med spa, and what nobody can promise

BrightLocal's 2026 consumer survey asked 1,002 U.S. adults how they use reviews. Of those, 97% said they read reviews for local businesses and 74% said they look for reviews written in the last three months. BrightLocal sells local SEO software, and the sample is general consumers rather than aesthetic clients, so treat the figures as a signal about how people shop, not as a med spa benchmark.

The recency figure matters more than the 97%. A profile whose newest review is eight months old looks dormant even if every review is glowing. A steady trickle of requests, rather than a push every few quarters, is what prevents that.

Google's own guidance says that more reviews and positive ratings can help your local ranking. It does not say how much, and nobody outside Google can give you an honest multiple. Be wary of any vendor that promises a ranking or booking lift from review volume. We are not going to promise one either.

What review gating is, and why the satisfaction check-in is a problem

Review gating means deciding who gets the public review link based on how they feel. The sorting can be a one-to-five survey, a reply to a check-in text, or a staff member's guess about who had a good visit. Clients who seem satisfied are sent to Google. The rest are sent to a private form, or to no one.

It is popular because it feels responsible: catch the problem privately and keep your Google profile clean. But Google's contributed content policy says merchants must not selectively solicit positive reviews from customers or discourage negative ones, and gating does the first by design. Google also says fake engagement is not allowed and will be removed, so a reputation built this way can be taken down.

The FTC's rule on consumer reviews, 16 CFR 465.4 and 465.7, does not use the phrase "review gating," and we are not claiming it names the practice. It does ban incentives that depend on a particular sentiment, and it bars materially misrepresenting the reviews on your own site as most or all of the reviews submitted when reviews have been suppressed based on rating or negative sentiment. A funnel that screens out clients who had a poor visit, followed by a website widget presented as "what our clients say," sits close to that second provision. Ask your own lawyer where the line falls for your setup.

The test for gating

Take a client who tells you their visit went badly. Does that client receive the same public review link, at the same time, as a client who tells you it was wonderful? If the answer is no, the workflow is gating, however it is described.

Two things are not gating: offering a private way to reach you to everyone, shown next to the public link, and a person calling an unhappy client to put things right. The FTC's questions and answers on the rule say a business may reply to a negative review and contact the customer to resolve the issue. What it may not do is use groundless legal threats or intimidation to get a review removed. The line is that a client's mood must never decide who is allowed to review.

A request system that holds up

Here is the design we would hold any review automation to, ours included. Each step is simple on purpose.

One trigger, one delay, every client. Pick a single rule, such as a set number of days after the visit is marked complete, and apply it to every visit. You can exclude clients for reasons unrelated to how they feel, such as having opted out of messages or having already left a review. Do not exclude anyone because they complained or seemed unhappy.
One direct link. Google's help page on getting more reviews describes asking customers to visit a Google link or scan a QR code. Everyone gets the same link.
Neutral wording. Thank the client, ask for honest feedback, and do not ask for five stars. Google's policy also cautions against soliciting reviews that include specific content, so do not script treatment names or keywords.
A private route beside the public one, not instead of it. Offer a way to reach a person to every client in the same message. Both options are visible to everyone.
At most one reminder. This is our recommendation rather than a rule. A second nudge is a courtesy; a third is pressure. Stop after one.
Consent and opt-out. Send texts only to clients who agreed to be messaged, and honor "STOP" immediately. Your counsel should confirm what consent your state and your booking terms require.
No pressure on the premises. A QR code on a checkout card is an ordinary ask. Google's policy says merchants should not require or pressure people to leave reviews while they are on the premises, so do not hand a client a tablet and wait.

Example request, adapt before using

Text message:

"Hi [first name], thanks for visiting [practice name]. If you have a minute, we'd value your honest feedback on Google: [link]. If anything about your visit wasn't right, reply here or call [number] and one of our team will follow up. Reply STOP to opt out."

Notice what it leaves out: no treatment name, which keeps health information out of a text, no request for a particular rating, and no condition. The same message goes to every client.

What the message must never say

"If you loved your results, leave us five stars." This asks for a particular sentiment and screens by mood.
"Leave a review and get 10% off your next visit," or an entry into a prize draw. Google calls incentives for reviews strictly prohibited, and the FTC's rule makes incentives conditioned on a particular sentiment an unfair or deceptive practice. Not conditioning the reward on a positive rating does not make it safe under Google's policy.
"Rate us one to five. If you pick four or five, tap here to post on Google; otherwise, tell us what went wrong." That is the gating funnel in one sentence.
"Please mention [treatment] and [neighborhood] in your review." That steers content, and a treatment name in a public review can also reveal that the reviewer is your client.

A note on staff incentives. We would also avoid bonuses tied to each person's review count. They reward the pressure Google's policy warns about and punish the staff who treat the most cautious clients. Measure the request process instead of individuals.

Reply to every review, without confirming anyone was a client

In the same BrightLocal survey, 80% of respondents said they are likely to use a business that responds to all of its reviews, and generic or templated replies put off 50%. Google's help pages say that replying shows customers you value their feedback. Put together, the practical rule is to reply to all of them, positive and negative, and to write each reply by hand or edit it until it is specific.

The risk is in what a reply gives away. In 2019 the HHS Office for Civil Rights announced that a Dallas dental practice paid $10,000 after responding to patient reviews with details of patients' health information, and in a later case a New Jersey provider paid $30,000 over information disclosed in replies to negative online reviews. Whether your practice is a HIPAA covered entity depends on how it bills and operates, which is a question for your counsel. The safe habit applies either way: do not confirm that the reviewer is a client, name a treatment, or describe anything about their visit in public.

Example reply to a critical review, adapt before using

"Thank you for the feedback. We take every review seriously. We can't discuss any individual's care in a public forum, but we would like to hear more and put things right. Please contact [name] at [phone number] so we can talk with you directly."

It does not argue, does not confirm who the person is, and gives a direct route to a named human. A reply to a glowing review can be warmer and more specific, but it should follow the same limits.

Here is where automation helps without overreaching. It can notify a person the moment a review is posted, draft a reply for them to edit, and track how long each review waits. It should not post replies to complaints unattended, because tone and privacy errors there are the expensive ones.

If a review is fake, off-topic or breaks Google's content policies, Google lets you flag it for review. That is not a tool for removing criticism you simply dislike.

Showing reviews on your own site and social channels

If you display reviews on your website, show them as what they are. The FTC provision above is about presenting a curated set as representative when negative reviews were suppressed. A heading such as "Selected reviews" is honest; "What our clients say" over a hand-picked set can mislead. Never write reviews yourself or ask someone else to.

With a client's permission, a short quote from a public review, with no treatment details, can work as social proof on Instagram. If you post regularly, IgPoster, our Instagram posting tool (in beta, with a free plan), can draft the post, and you approve what goes out. You remain responsible for checking each post against your state's advertising rules.

What to measure, and what to leave out

Requests sent and reviews received. The ratio is your response rate. We will not quote a typical rate, because it depends on your clients and your channel, and published numbers rarely say how they were measured.
Time to reply and share of reviews replied to. The target is every review, quickly.
Issues raised through the private route, and time to resolve them. This is the benefit gating was supposed to deliver, and you keep it without the sorting.
Not a target star rating. Chasing a number invites the behavior this post warns against. Google's own help page says a mix of positive and negative feedback often feels more trustworthy.

Review requests also fit naturally into the rest of post-visit follow-up. If you want to see how that works for a med spa, the med spa page describes the follow-up we build, and the free audit will check your current review requests against the list above.

Want a second opinion on your review workflow?

Call (347) 757-4410 to hear Emma, our voice agent, or ask for a free audit and we will compare your current review requests and replies with the checklist in this post.

Hear Emma: (347) 757-4410 Get a free audit

Sources and what they do and do not show

Every figure in this post links to the page it came from, which we opened and read before citing it. The notes say what each source measured and where it stops. Where we could not find a reliable figure, the post says so instead of filling the gap.

BrightLocal, Local Consumer Review Survey 2026 (February 11, 2026)Survey of 1,002 U.S. adults (via SurveyMonkey): 97% read reviews for local businesses, 74% look for reviews written in the last three months, 80% say they are likely to use a business that responds to all of its reviews, and generic or templated replies put off 50%. BrightLocal sells local SEO software.
Google Maps user-contributed content policyProhibits offering incentives for reviews, and says merchants must not discourage or prohibit negative reviews or selectively solicit positive reviews.
Google Business Profile Help, "Tips to get more reviews"Says to remind customers to leave reviews through a Google link or QR code, and that offering incentives for reviews is strictly prohibited.
Google Business Profile Help, "Tips to improve your local ranking on Google"States that more reviews and positive ratings can help a business's local ranking, and that replying to reviews shows you value feedback.
Google Business Profile Help, "Manage customer reviews"Covers replying to reviews and flagging reviews you believe violate Google's content policies.
16 CFR 465.4, buying positive or negative consumer reviewsMakes it an unfair or deceptive practice to give compensation or other incentives in exchange for, or conditioned on, reviews expressing a particular sentiment.
16 CFR 465.7, review suppressionBars threats and intimidation to remove or prevent reviews, and bars materially misrepresenting that the reviews shown on your site are most or all of the reviews submitted when reviews have been suppressed based on rating or negative sentiment.
FTC, "The Consumer Reviews and Testimonials Rule: Questions and Answers"The FTC's plain-language guidance on the rule, including contacting reviewers to resolve issues.
HHS press release, "Dental Practice Pays $10,000 to Settle Social Media Disclosures of Patients' Protected Health Information" (October 2, 2019)A practice responded to patient reviews on Yelp with details of patients' health information and settled with the HHS Office for Civil Rights.
HHS Office for Civil Rights, Manasa Health Center resolutionA New Jersey provider settled for $30,000 over patient information disclosed in responses to negative online reviews.

OMII AI sells AI voice and follow-up systems for med spas, so weigh what we recommend accordingly. This post is general information about running a practice, not medical, legal or compliance advice. Rules on texting, call recording, advertising and patient privacy differ by state and by how your practice is set up, so check them with your own counsel.