The Google Business Profile Checklist for a One-Location Clinic

A parent whose pediatrician just said “you should have her evaluated” does not start at your website. She types “speech therapist near me” into her phone in the parking lot, and Google answers with a map and three businesses. If your practice is one of the three, she sees your rating, your hours, and a photo of your waiting room before she has any idea your website exists. For a practice with one location, the Google Business Profile is not a marketing extra — it is the actual front door, and it is competing on a page you do not control with rules you did not write. The good news is that the work is finite. A profile is not a campaign that needs feeding; it is a setup you do carefully once, a review habit you run continuously, and a short maintenance loop. This article is that setup, in order — including the part that makes healthcare different from every restaurant and plumber on the same map: what HIPAA does to the review section.

Google is explicit about how the local results are ordered. Its own documentation names three factors — relevance, distance, and prominence — and states plainly that “businesses with complete and accurate information are easier to match with the right searches.” Relevance is how well the profile matches what was typed; distance is how far you are from the searcher; prominence is how well known the business is, which Google says draws on signals like links, articles, and — its words — “Google review count and review score.” There is no submission form and no fee. The profile, the categories, and the reviews are the inputs.

That framing should change how a solo or two-clinician practice spends its marketing hours. A website redesign moves none of those three factors. An hour spent completing the profile and a standing habit of asking discharged families for reviews move two of them. The sections below are ordered the way the work should be done: identity first, categories second, completeness third, reviews last and forever.

Start by searching Google Maps for your practice. Solo practices are often surprised to find a profile already exists — Google generates them from public data — sometimes with an old address or a former employer’s phone number attached. Claiming and verifying that profile, rather than creating a second one, is the first move, because Google’s guidelines allow only one profile per business, and duplicates confuse both the algorithm and the families trying to call you.

Then comes the temptation every practice meets: the business name field. Google’s guidelines require the name to “reflect your business’s real-world name, as used consistently on your storefront, website, stationery, and as known to customers.” “Bright Steps Pediatric Therapy” is compliant. “Bright Steps Pediatric Therapy — Best Speech Therapist in Austin” is not, and profiles that stuff keywords into the name risk suspension — a catastrophic outcome for a practice whose referral flow runs through the map. Put the keywords in the categories and services fields, where Google actually wants them. The same real-world consistency applies to your address and phone: the profile, your website footer, and your payer directories should agree character for character, because conflicting listings are exactly the kind of ambiguity that costs a match on relevance.

Categories are how Google decides which searches you are relevant to, and its guidance is to choose the fewest categories that describe your core business — with the primary category carrying the most weight. Specific beats general: a pediatric speech practice is better served by a speech-focused primary category than by a generic clinic one, because the family is typing “speech therapy,” not “health clinic.” The category list is Google’s own taxonomy — you pick from it rather than writing your own — and it changes over time, so search it for your discipline’s most specific option rather than settling for the first plausible match.

A multidisciplinary practice should set the primary category to the discipline that drives the most new-patient searches and add the others as secondary categories. Resist the urge to add every remotely related category: Google’s own guideline is fewer, and a profile categorized as five different things matches none of them strongly. Revisit the choice once a year — if the caseload has shifted from mostly speech to mostly OT, the primary category should follow it.

Google’s documentation says it directly: complete profiles are easier to match to searches, and complete information helps customers act. Every empty field is a question a parent has to call to ask — or a reason to call the practice above you instead. Work through this once, saving as you go; most one-location practices finish in an afternoon. Items involving photos or descriptions have a privacy dimension in healthcare, which is flagged where it applies.

Reviews are the prominence signal a small practice can actually influence, and the practices that accumulate them do nothing clever — they ask, consistently, at moments when the family has a result to talk about. What matters is that the asking is systematic rather than mood-based, and that it respects two sets of rules at once. Google’s fake-engagement policy prohibits offering incentives — payment, discounts, free goods or services — for reviews, prohibits discouraging or prohibiting negative reviews, and prohibits selectively soliciting positive ones (the practice known as review gating). And since October 21, 2024, the FTC’s Trade Regulation Rule on the Use of Consumer Reviews and Testimonials has banned buying or selling fake reviews, purchasing positive or negative reviews, and certain review-suppression practices as a matter of federal law, with civil penalties attached. The compliant system is also the simple one:

1. 01

   Pick the asking moments

   Discharge is the natural one — the family has an arc to describe. A meaningful milestone mid-care is the other. Build the ask into those workflows (part of the discharge conversation, or the goodbye at the front desk) so it happens by default, not when someone remembers.

2. 02

   Ask everyone, the same way

   The same families get the same ask regardless of how their episode went. That is what keeps you clear of review gating under Google’s policy and of suppression under the FTC rule — and it is also what makes your review page read as credible rather than curated.

3. 03

   Make the ask a link, not a scavenger hunt

   Google provides a shareable review link for every profile. Put it in the discharge email and on a small card at the front desk. The family should go from “sure, happy to” to the review form in one tap.

4. 04

   Keep the ask content-neutral

   Ask for an honest review of their experience — full stop. Google’s policy also covers pressuring people to review while on the premises and telling reviewers what to write, and scripting the content is where well-meaning asks cross the line. Never mention diagnoses or outcomes in the ask, and never suggest they should.

5. 05

   Respond to every review, briefly

   Google recommends responding to reviews as part of maintaining a profile, and an owner who visibly answers reads as an owner who runs an attentive practice. In healthcare, though, the response itself is the highest-risk text on the whole profile — which is what the next section is about.

Here is the asymmetry every covered entity has to internalize: the patient can say anything; you can confirm nothing. A review that describes three months of therapy in detail does not release you to discuss it — HIPAA’s restrictions apply to the provider regardless of what the patient has chosen to disclose, and even the bare acknowledgment that a named person is a patient of the practice is a disclosure of protected health information. A review response is not a conversation with the reviewer. It is a public statement by a covered entity, published to everyone who ever searches your name.

This is not a theoretical reading. The Office for Civil Rights has repeatedly settled with providers over exactly this behavior. Manasa Health Center, a New Jersey psychiatric practice, paid $30,000 and adopted a corrective action plan after OCR investigated a complaint that it had disclosed patients’ protected health information — including information about a patient’s mental health — in responses to negative online reviews. New Vision Dental, a California practice, settled after OCR found it had responded to Yelp reviews by, among other things, posting patients’ full names when they had reviewed under pseudonyms and adding details about their visits and insurance. Elite Dental Associates paid $10,000 in an earlier settlement over social media disclosures of patient information. The pattern OCR keeps sanctioning is the same instinct: a stung provider replying with the facts of the case. The corrective action plans that follow are years of monitored compliance work — over a reply that took ninety seconds to type.

A review can be reported for removal only when it violates Google’s content policies — spam and fake engagement, off-topic rants, harassment, hate speech, personal information, conflicts of interest such as a review from a competitor or former employee. “Negative and unfair” is not on that list. A one-star review from a family upset about your cancellation policy is policy-compliant content, and the tools for it are the ones above: a scripted response that shows every reader a composed practice, and a steady stream of asked-for reviews that put it in context. What you must not do is answer it with pressure — the FTC rule reaches certain suppression conduct, such as unfounded legal threats against reviewers, and a therapy practice threatening a family in public is a worse outcome than any review. For the genuinely fake or abusive review, flag it through the profile, be patient, and keep the response on-script in the meantime.

And that is the honest shape of the whole channel: a finite setup, a permanent habit, and restraint at the exact moments restraint is hardest. The practices that win the map pack in a small market are rarely doing anything sophisticated. They are findable, complete, answered, and reviewed — and when a bad night shows up in the review feed, they respond like a healthcare practice instead of a wounded proprietor.