Skip to content
← All articles

Notes for owners · Branding and communication

Patient testimonials: what a clinic can and cannot publish

A general guide to using patient stories on a clinic website, with consent and without implying a cure, plus the questions to put to your own council before anything goes live.

The GullySales team · Updated 17 Oct 2026 · 6 min read

Rules for this trade differ by state and professional body, and they change. Check the current position with your own council or adviser before you act on anything here.

Editorial illustration for Customer testimonials
On this page
  1. Why this is a different question for doctors
  2. The questions to put to your council
  3. A decision rule for any single story
  4. A dermatology clinic in Ranchi
  5. Where you can lean on reviews instead
  6. What can build trust without a testimonial
  7. Asking a patient for consent without pressure
  8. Writing it down

A clinic can usually collect patient feedback. Whether it may publish a patient's words in its own advertising depends on its medical council and the advertising standards that apply, which differ by state and body and change. So the safe order is to ask your council or adviser first and get written consent from the patient. Then publish nothing that suggests a result, a cure or a comparison with other doctors.

Why this is a different question for doctors

A shop can print "customers love us". A doctor often cannot. Many councils restrict how a registered practitioner advertises, and some are strict about patient testimonials in particular. A patient story can look like a promise of outcome.

We are not your adviser and we will not tell you what your council allows. What we can do is set out the questions that decide it, so the conversation with the council is short and specific.

The questions to put to your council

Write these on one sheet and keep the answer, with the date and the name of the person who gave it.

  1. May a registered practitioner publish patient testimonials on their own website, in print or in advertising?
  2. Does the answer change for a hospital or company that is not itself the practitioner?
  3. Does it make a difference if the patient posted the words on a public platform and the clinic only shares a link to it?
  4. What must the patient consent to, in what form, and for how long?
  5. Are before and after images allowed, and under what conditions?
  6. Is there a rule on replying to reviews?

If the answer to the first is no, the rest of this post is about what to do instead. If it is yes, the conditions on the others still apply.

A decision rule for any single story

Before a patient's words go anywhere, run them through four checks. If any fails, do not publish.

CheckPasses ifFails if
ConsentYou hold written consent for these words, this place and this purposeThe patient said "yes, fine" on the phone
OutcomeThe words describe the experience: waiting, explanation, courtesyThe words say cured, fixed, "no pain now", or promise a result
IdentityA first name or initials the patient agreed toA full name, a face or a detail that points to them
ComparisonNothing about other doctors"Better than the hospital I went to before"

A line like "the doctor explained each option in Tamil and I was not hurried" passes. "My knee was completely cured after one visit" fails, even if it is true and the patient wrote it unprompted.

A dermatology clinic in Ranchi

Take an invented skin clinic in Ranchi with thirty happy messages on WhatsApp. The owner pastes six into a carousel on the home page, with first names and photographs. Two of the messages say the rash is "gone for good".

The mistake is the carousel, not the kindness of the patients. The owner can put it right in three steps. First, the owner asks the council what is permitted. Second, the owner writes back to each of the six patients, explains where the words would appear, and asks for written consent. Third, the owner keeps the ones that describe the visit and drops the two about the rash. Only four of the six reply, so the carousel shrinks to a few lines. If the council says no testimonials, the owner thanks each patient and asks the happy ones to post a Google review in their own words. Those words are theirs to write, not the clinic's to edit.

Where you can lean on reviews instead

A public review a patient posts on a map or listing site is not a clinic testimonial in the same sense. You did not write it or edit it, and you do not choose which ones to show. Many clinics build trust here, and our post on managing online reviews for a healthcare business covers asking at the right moment and replying without breaking confidentiality.

Two rules hold either way. Never offer a discount, a gift or a free consultation in exchange for a review. And never write a review yourself, or ask staff and friends to write one. Platforms can remove such reviews, and councils and consumer bodies may treat it as misleading.

What can build trust without a testimonial

  • The doctor's training and registration, stated plainly
  • How the first consultation runs, step by step, so a nervous patient knows what to expect
  • Honest answers to the questions the front desk hears most, such as how many sittings, whether it hurts, what happens if the treatment is not suitable
  • Photographs of the clinic, the entrance and the treatment room
  • A named person who answers the phone

None of these quotes a patient, so none needs a patient's permission, though your council's rules on claims still apply to each. For a first-time patient they can answer more than a stranger's praise does.

Some patients say yes to the person in front of them. So separate the asking from the visit. Send the proposed words and the place they will appear in a message a few days later, and make no for an answer easy: "Please tell us if you would rather we did not." A patient who still feels in the doctor's hands may agree to avoid awkwardness, and that is not consent worth holding.

Writing it down

If you decide to publish, keep a one-page consent form. It holds the patient's name, the exact words, where they will appear, the date, and a line saying the patient can withdraw. Keep a note of the council's answer next to it. When the rules change, you will want to know which published items need review.

Start with the six questions and a call to your council, and write the answer down before anything is published. Our healthcare hub sets the wider picture, and online review generation and management is the nearest service for the review routine. When you are ready, tell us what you need.

Questions

Questions owners ask.

Is a Google review the same as a testimonial I publish myself?
Not quite. A review a patient posts on a public platform is theirs. A testimonial you collect, edit and place on your own website or advertising is your publication. Councils and advertising bodies may treat the two differently, so ask yours which applies to you.
Do I need written consent from the patient?
Get it in writing, every time, before you use a patient's words, name or photograph anywhere. Say where it will appear and let them withdraw. Rules on health data and privacy differ and change, so ask your adviser how long to keep the consent.
Can I reply to a negative review with the patient's treatment details?
No. A public reply should not confirm that the person was your patient or discuss their condition; ask your adviser about the exact limits. Say that you take the matter seriously and give a number to call. Handle the details privately.
What if the council says no testimonials at all?
Then follow it, and move the trust-building elsewhere: clear information about your training, how the consultation runs, honest answers to common questions, and Google reviews that patients post on their own. A testimonial is never worth your registration.

From the blog

More notes for owners.

Your next practical step

Tell us what you are trying to grow, and we will read it before we call.

Eight short steps, mostly taps. Skip anything you would rather answer on the call.