SEO for Small Clinics 2027: How a Multi-Provider Clinic Gets Found in Every Town It Serves

Your clinic has several providers, maybe a few locations, and a busy phone line. Patients type a town or a symptom into a phone and look at the first few names. If your clinic is missing, or shows up twice with an old phone number, they call someone else. This guide is for the practice manager or front-desk lead who was handed "the Google stuff". It gives you roles, a weekly 60-minute routine and clear steps with times. It does not promise a ranking, because nobody can.

Quick Answer

Get found in every town you serve by giving each real location its own Google Business Profile and its own honest web page, then keeping both accurate every week.

• Step 1, who does what (about 1 hour, once). Name one owner, one backup and one clinical lead who approves health content. Then book a 60-minute weekly routine.
• Steps 2 and 3, profiles and duplicates (about 1 to 2 hours per location, then a wait). Give each location one profile, fill it in the same way and verify it. Then remove or merge any extra listings.
• Steps 4 to 6, pages, bios and staff changes (about 2 hours per location, then 30 minutes per provider). Write one real page for each location and each provider. Run the same checklist whenever someone joins or leaves.
• Step 7, reviews (about 15 minutes a week, inside the 60-minute routine). If your clinic has psychologists, counselors, social workers or family therapists, ask the clinical lead to check their ethics code before you ask current clients for reviews. Then ask each patient the same way, once, after a visit. Never reward a review.
• Step 8, a monthly report (about 45 minutes a month). Check Google Search Console, Google's free report on how your site appears, and each profile. Write down what changed.

The times in this guide are planning estimates for a beginner, not measurements. Your own pace may differ.

What Is SEO, in Plain Words?

SEO, short for search engine optimization, means making it easier for the right people to find your clinic when they search. For a clinic, the right people live near one of your locations.

Google shows them a map with a few clinics and a list of web pages. Each clinic on the map comes from a free listing called a Google Business Profile. SEO is the set of small jobs that help you appear in both and look trustworthy when you do. It is not a trick. Google says useful content will likely influence your presence in search more than any other tip in its beginner guide (Google Search Central, 2026).

How Does Google Decide Which of Your Locations to Show?

Google says local results are mainly based on relevance (how well your profile matches the search), distance and popularity (how well known you are) (Google Business Profile Help, 2026). Distance matters for a clinic. Google says results can depend on where the searcher is (Google Search Central, 2026). So two people in two towns can see two different clinics for the same search. To Google, a clinic with three locations looks like three small local businesses, each needing its own profile, page and reviews. That last point is our reading, not Google's wording.

Be honest with your owner or board about time. Google says some changes may take effect in a few hours and others could take several months. It suggests waiting a few weeks before you judge whether a change helped (Google Search Central, 2026). Nobody can promise you a place on the list. Google puts it plainly:

"No one can guarantee a #1 ranking on Google."

Google Search Central, 2026

Step 1: Decide Who Owns SEO in Your Clinic

Time: about 1 hour, once. You need: three names and a shared clinic email address. This work slips when nobody owns it. Hours change, a provider leaves and a review waits two weeks. Give each job a name before you touch a single profile.

1a. Name three people

The clinical lead protects patients and your licensed providers, because health claims on a public page can cause real trouble.

Also name a privacy contact. This is the person who handles HIPAA for your clinic. HIPAA is the US federal privacy law for patient information. This can be the clinical lead or another person you choose. This person says yes or no to any new tracking tool on your website. A tracking tool, also called a tag or pixel, is a small piece of code that records what visitors do. Google Analytics, a free Google service that counts visitors, is one example. The rules section near the end explains why to be careful on booking pages and on the portal, the logged-in area where patients see their records.

1b. Put every account in the clinic's name

Create one shared clinic email address, such as a marketing address at your own web address. Make it the owner of every location's profile and of Google Search Console. Google Search Console is a free Google service that shows how your site appears in Google Search (Google Search Console Help, 2026). Add the backup as a second owner or manager.

Do not let one person's own email be the only owner. Google says ownership may be revoked if the owner has not signed in recently (Google Business Profile Help, 2026). A person who leaves also takes the keys with them.

Make one shared online spreadsheet and call it the log. Use it for every sheet and list in this guide. Never put passwords or patient details in it. Keep passwords in a password manager.

1c. Book the 60-minute weekly routine

Pick one fixed time, such as Tuesday at 10:00, and put it in the owner's and the backup's calendars. A private window is a browser window that does not use your saved sign-ins, so you see what a stranger sees. Here is the routine:

These minutes are our planning estimates for about three locations, not measurements. With five locations, plan on about 15 minutes more for reviews and checks.

How you know Step 1 worked

• The owner and the backup can both sign in to every profile and to Search Console.
• The log lists each profile, each page owner and the last date checked.
• No profile has only one person's own email as its owner.

The mistake people make in Step 1

They make SEO "everyone's job". Then it is nobody's job, and the first thing left unchecked is the thing that breaks.

Step 2: Give Each Location One Google Business Profile

Time: about 1 to 2 hours per location, then a wait for verification. You need: each location's address, phone, hours and photos, and a way to receive a postcard or call. Adding or claiming a profile costs nothing. To add a location, go to business.google.com/add. Or find the location on Google Maps and choose "Claim this business" (Google Business Profile Help, 2026). The rest of the setup is the same for every location, so follow Step 1 of SEO for Private Practice 2027 once for each one. This step covers only what is different for a clinic. Google's rule for clinics with several sites is short:

"Do not create more than one page for each location of your business, either in a single account or multiple accounts."

Google Business Profile Help, 2026

2a. Check each location is allowed

Google says a business must make in-person contact with customers during its stated hours, and online-only businesses are on its ineligible list (Google Business Profile Help, 2026). A business that travels to customers can also have a profile. A service-area business gets one profile for the whole area and should hide its address (Google Business Profile Help, 2026).

Watch out for these addresses (Google Business Profile Help, 2026):

• A P.O. box, or a mailbox at a remote location, is not acceptable.
• A rented mailing address where you do not operate, called a virtual office, is not eligible.
• An office in a co-working space is allowed only if it has clear signage, receives customers during business hours and is staffed by your own staff. Any address shown on Google should have permanent fixed signage with the business name.

Telehealth is a grey area. Google's pages do not mention it by name. Our reading, not Google's words: a location where clients are seen only by video does not meet the rule as written. If you run a video-only arm, read Google Business Profile for Telehealth Practices 2027 first.

2b. Fill in every profile the same way

Categories, hours, photos and the description work as Step 1 of SEO for Private Practice 2027 describes. Never post patient photos. Two rules matter most for a clinic:

1. Name. Use the name on your sign, website and stationery. Google does not allow marketing taglines, service details, location details, phone numbers or web addresses in the name. All locations in the same country should use the same name, with limited exceptions (Google Business Profile Help, 2026). So the town belongs in the address, not in the name.
2. Booking link. Google says that for several locations, each booking link must lead to a page for that specific location, not a general page or another location's page. The link cannot be a social media site, a messaging link, an app-store link or a link shortener. Your business must be verified first (Google Business Profile Help, 2026). Google's pages disagree on the maximum number of links, so do not plan around a number.

2c. Decide who gets a profile of their own

Google defines an individual practitioner as a public-facing professional, typically with their own customer base. Its examples are doctors, dentists and lawyers, among others. Therapists, counselors and social workers are not named. Whether they qualify is our reading of that test, and we say they may.

Google says a practitioner who is public-facing and can be contacted directly at the verified location during stated hours should create their own profile. Whether your clinic wants the extra upkeep is your decision. Our advice is to start with the clinic profile. Google's rules for a clinic with several providers at one address (Google Business Profile Help, 2026):

• The clinic creates its own profile for the location, separate from the providers' profiles.
• A provider's profile name includes only the provider's name, not the clinic's name. It may include a title or degree, such as Dr. or MD.
• Support staff, such as the front desk, should not have profiles.
• A provider should not have several profiles to cover their specialties. List the specialties on the one profile.
• If one provider is the only public-facing provider at a location and represents a branded clinic, Google says it is best to share one profile. Name it with the brand, a colon and the provider's name.

Ask three questions about each provider. Do patients contact this person directly at this location during stated hours? Does this person have a public-facing role? Will we keep only one profile for them? If the first two answers are yes, a profile may be allowed. Each extra profile is one more thing to keep correct, and Google's pages do not say that more profiles bring more visibility.

2d. Verify, one location at a time

Verification works the same way for every location. Step 1 of SEO for Private Practice 2027 explains the options. For a clinic, finish one location before you start the next, because postcards can take weeks and the codes can get mixed up. This is our advice, not a Google rule. Do not edit the name, address or category while a code is on its way, or it will not work (Google Business Profile Help, 2026).

2e. If Google suspends a profile

Google says extra words in the name could result in suspension, and an ineligible address can too. Step 3 covers duplicates. If Google suspends a profile, appeal in the Business Profile appeals tool. Do not create a new profile for the same business while the appeal is open (Google Business Profile Help, 2026). SEO for Private Practice 2027 lists the evidence to send.

How you know Step 2 worked

• Search your clinic name in a private window, on a phone. Each location shows one profile with the right name, address, phone and hours.
• The map pin sits on the right building.
• Each booking link opens for a stranger and shows the right location.

The mistake people make in Step 2

They open a new profile when the old one is stuck, for a new service or after a move. That is how duplicates start. Fix the existing profile instead.

Step 3: Clean Up Duplicate and Wrong Listings

Time: about 2 hours for the first sweep. You need: the log and your list of addresses and phone numbers, including old ones. A duplicate profile will not show on Google Search or Maps. Google gives three reasons a profile is marked a duplicate. A verified profile may already exist for the same business. Several profiles may share an address. Or several profiles for one business may offer different services (Google Business Profile Help, 2026). A new profile made after a move, instead of updating the old one, can also become a duplicate.

3a. Find every listing

Search Google and Google Maps in a private window for each of these:

• Your clinic name, and any old name.
• Each address, and any old address.
• Each phone number, including old ones.
• Each provider's name together with your town.

Write each result in the log. Use these columns: location, listing name, address, phone, who manages it and what to do.

3b. Decide what to do with each one

Google's page "Resolve duplicate profiles & ownership issues" covers removing, merging and ownership requests. This guide gives no click paths for them, because no source it used does. The same page says distinct businesses may share an address if each has its own name, clearly different signage and is eligible. That includes individual practitioners at a shared location (Google Business Profile Help, 2026).

3c. Fix wrong details everywhere else

Google says profile information is compiled from a variety of sources. These include a business's official website, licensed data from third parties and users who add details such as addresses and phone numbers (Google Business Profile Help, 2026). Google also says businesses with complete and accurate information are more likely to show in local results (Google Business Profile Help, 2026). So a wrong phone number on a directory can flow back to you.

Fix wrong or missing details first, starting with the listings patients actually see. Google's local-ranking page does not list directory listings, so skip any offer of dozens of paid listings. For listings beyond Google, see SEO for Private Practice 2027.

How you know Step 3 worked

• Searches for your name, each address and each phone number show one profile per location.
• Directory pages show the same name, address, phone and hours as your profiles.
• The log shows every listing with an owner and a status.

The mistake people make in Step 3

They merge two profiles without saving their review replies first. Google says replies may be lost.

Step 4: Build One Real Page for Each Location

Time: about 2 hours per location. You need: the location's facts, real photos and an approved provider list.

4a. What Google says, and what it does not say

Google's spam policy calls it "doorway abuse" when pages or domains are aimed at specific cities or regions and send people to one page. Its list of spam signs also includes blocks of text that list cities and regions a page is trying to rank for (Google Search Central, 2026). So make a location page only for a place where you really have an office or serve people.

The only Google statement about building location pages that we could cite is a 2014 blog post. It says such pages typically include the address, phone number, opening hours and other information (Google Search Central Blog, 2014). So treat this as something Google has said, not a rule Google requires. Google's documentation does not say how much unique text a location page needs, or how different two pages must be. No number is promised here.

4b. What goes on a location page

• The clinic name and this location's address, written as on its profile.
• This location's phone number, opening hours that match the profile, and a clear way to book here.
• Plain directions: the nearest main road, parking, the bus stop and the entrance. Add the accessible entrance if there is one.
• Who works here, with a link to each provider's page.
• Which services are offered here, with links to your service pages, and any service that is not offered here.
• Real photos of the front, the entrance and the waiting area. Never use patient photos.
• A page title and short description that belong only to this page. Google says a good title is unique to the page, clear and accurate (Google Search Central, 2026).
• Links to the page from your home page, your locations page and each provider's page.

Page titles, photo descriptions and the other website basics work as SEO for Private Practice 2027 describes.

Real local detail is the fix for copied pages. A page with three facts that are true only for this location is unlikely to be a copy. If you cannot write three, add real detail, such as parking, the entrance or who works there. Do not merge two real locations into one page. That test is our advice, not Google's.

4c. What about the towns you serve?

A clinic cannot be in every town. Give each real location its own profile and page, so people in nearby towns can find the closest one. Add plain directions that help a patient from another town plan the trip. For example, a clinic might write "We are on Elm Street, two blocks from the bus station".

A short plain sentence naming the areas you really visit is fine. Do not add a long block of town names, and do not make pages aimed at towns where you have no office that send people to one page. Google's spam policy names both. The short-sentence advice is ours, not Google's. For home visits, see the service-area rule in Step 2a.

4d. A simple site structure for services across locations

Google's pages do not lay out a structure for multi-location clinics, so this part is our advice.

Write each service page once. Put what differs by location, such as providers, hours or insurance, on the location page. Make a page for one service at one location only when the providers, hours, price or way to book really differ. It must also say something true that the two parent pages do not.

If you use an AI writing tool to draft pages, have the clinical lead check every line. Google says all AI-generated content must be fact-checked before it is published (Google Search Central, 2026). Never use a tool to churn out a page per town, because Google's spam policy treats using AI tools to make many pages without adding value as spam.

How you know Step 4 worked

• Each location page opens on a phone and shows the right address, phone, hours and booking button.
• Each page title and description is different from every other page's.
• A teammate can find each location from your home page in two clicks.
• Search Google for your clinic name and the town. Your location page may appear in time, but nobody can say when.

The mistake people make in Step 4

They copy one location page, change the town name and publish it five times. Patients get nothing new. If the towns are ones where you have no office, it is the pattern Google calls doorway abuse.

Step 5: Write Provider Pages That Help Patients

Time: about 30 minutes per provider. You need: each provider's approved details and a real photo with their written permission. A clear page about each provider helps a patient decide whether to book. That is our reading, not a source's finding.

5a. What to put on each provider page

• The name as it appears on the license, the role and the license type.
• Real training and years of experience, as the provider confirms them.
• Who the provider sees, in plain words, such as ages or concerns.
• Which locations the provider works at, and whether they offer video visits.
• A short note in the provider's own voice about how they work.
• A link to book with this provider at the right location.
• A real photo, with a short description of what it shows.

Google calls made-up names, AI-generated headshots and false credentials deception (Google Search Central, 2026). Never invent a provider, a headshot or a title.

Credentials must be accurate. The American Counseling Association (ACA) Code of Ethics says counselors identify their credentials accurately (ACA, 2014). Texas requires advertisements for its licensed professional counselors, including directory listings, to state the licensure status (Texas Behavioral Health Executive Council, 2026). Other states differ, so each provider should check their own board.

5b. What to leave out

Leave out "best", "top-rated" and any promised result. Standard 5.01 of the American Psychological Association code bars false or deceptive public statements, including statements about the results of services (American Psychological Association, 2017). Three state rules restrict claims of superiority or comparison that cannot be substantiated. They are California's Business and Professions Code section 651 (California Legislative Information, 2026), New York's rule (New York State Education Department, 2026) and Texas's counselor rules (Texas Behavioral Health Executive Council, 2026). New York also bars guarantees of any service. These rules cover specific professions, so confirm which applies to each provider's license.

5c. Keep it true

Each provider reads and signs off on their own page, and the clinical lead approves it. Check it once a year, and whenever a license or role changes. Make sure directory listings say the same thing. The American Association for Marriage and Family Therapy (AAMFT) code asks therapists to make reasonable efforts to correct false or misleading information made on their behalf by others (AAMFT, 2026).

How you know Step 5 worked

• Every provider who sees patients has one page, with one photo and one booking link.
• Names, titles and licenses match the license, the profile and each directory.
• The clinical lead has approved each page, and the date is in your log.

The mistake people make in Step 5

They paste a generic bio from a brochure or an AI tool. It says the same thing every other clinic says.

Step 6: What to Do the Week a Provider Joins or Leaves

Time: about 30 to 45 minutes per change. You need: the provider's written details and the clinical lead's approval. Staff changes are when profiles, pages and listings go wrong. A provider who left can stay on pages you forgot to update. A new provider can be missing everywhere. Run the same checklist every time and record it in the log.

When a provider joins

1. Before day one, collect the name as on the license, the license type, training, the locations and days they work, and a photo with written permission.
2. Write the page, have the provider read it, and have the clinical lead approve it. No "best" and no promised results.
3. Publish the provider page. Link it from the providers list and from each location page where they work.
4. Add the provider to your booking system, then book a test visit in a private window.
5. Decide about a profile of their own using the three questions in Step 2c. If yes, use the provider's name only, and add the clinic's shared account as an owner or manager from day one.
6. Add the provider to every directory where the clinic lists its people.
7. Update the "who works here" text on each location page.
8. One week later, search their name together with the clinic name and check what shows.

When a provider leaves

1. On their last day, remove their access to every account: profiles, Search Console, your website, directory logins and the shared email. Change any shared passwords.
2. Take them off the booking system so no new patient can book them.
3. Ask the provider in writing whether their name and photo may stay on the clinic's site. If you keep their page, say plainly that they no longer practice here and remove booking links and "accepting patients" wording. Otherwise send visitors to the location page. Google's pages do not cover this case, so treat it as our advice.
4. Remove them from location pages, directories and email signatures.
5. Deal with their own Google profile, if they have one. Google's pages do not say what should happen when a practitioner leaves, so agree in writing beforehand who updates or removes it. The ownership request in Step 3 is for a profile for the clinic or a location. It does not give the clinic the right to take over a provider's own practitioner profile; agree that in writing.
6. Do not report a review just because it names the provider who left. Google says not to report a review you simply disagree with or dislike (Google Business Profile Help, 2026).
7. Put a reminder in the calendar for 30 days later, then run the check below.

Telling patients about a provider change is a care and legal matter for your own policies. This checklist covers only what the public can find.

How you know Step 6 worked

• Search the provider's name with the clinic name after 30 days. If old pages still show, list them in the log and check again. Google says changes can take months.
• Nobody who has left can sign in to any account.
• The log has a dated checklist for each change.

The mistake people make in Step 6

They update the staff list but forget the Google profile, the directory listing and the booking page. Patients then book someone who has gone.

Step 7: Make Review Requests a Clinic Routine

Time: about 2 hours to set up, then about 15 minutes a week. You need: each location's review link and a written do-not list. Google says more reviews and positive ratings can help local ranking (Google Business Profile Help, 2026).

7a. Get each location's link

Open the location's Business Profile on a computer, because QR codes can currently be made only in a computer browser. Choose "Read reviews", then "Get more reviews". Copy the review link, or download a QR code (Google Business Profile Help, 2026). Each location has its own profile, so each location gets its own link.

7b. Check your ethics code, then ask every patient the same way

If your clinic has psychologists, counselors, social workers or family therapists, ask the clinical lead to check their ethics code before you ask current clients for reviews. Each of these codes says not to solicit testimonials from current clients or other people vulnerable to undue influence. They are the APA code, 2017, the ACA code, 2014 (which also covers former clients), the NASW code, 2026 and the AAMFT code, 2026. The sources we read do not say whether a Google review request counts. See SEO for Therapists 2027.

After that check, send the same short message once, after a visit, from the same step in your process. Google allows you to ask for reviews that reflect a genuine experience, with no incentive and no attempt to influence the rating or the contents (Google Maps User Generated Content Policy, 2026).

Here is a labelled illustration of neutral wording: "Thank you for visiting us. If you would like to share your experience, this link opens our Google page. Reviews are public." Send it the way you already send appointment reminders, to patients who agreed to be contacted that way. Ask your privacy contact if you are unsure.

7c. What staff must never do

Google's policy on pressure is direct:

"merchants should not require or pressure users to leave ratings or write reviews while on the premises"

Google Maps User Generated Content Policy, 2026

Give the front desk this list.

• No gifts, discounts or rewards. Google treats any incentive in exchange for a review as fake engagement and strictly prohibits it (Google Business Profile Help, 2026).
• No pressure at the desk. Skip the waiting-room tablet.
• No quotas. Google's examples of what is not allowed include asking staff to solicit a certain number of reviews.
• No requests that name a provider. Google's examples also include reviews that name a staff member. So do not write "please mention your provider by name".
• No screening. Do not send a private survey first and the Google link only to happy patients. Google bans selectively soliciting positive reviews. Staff at the US Federal Trade Commission (FTC) say its review rule has no specific ban on asking only customers you think are happy. They add that the practice could still violate the FTC Act (FTC, 2024).
• No staff or family reviews. The FTC says reviews from insiders must clearly disclose the relationship. The simplest house rule, which is our advice, is that staff and their families do not review the clinic.
• No reporting of reviews you simply dislike.

Track whether the routine ran, not how many reviews arrived. Replying to reviews has its own rules, in the rules section below.

How you know Step 7 worked

• Each location's link opens its own Google review box.
• Every patient gets the same message from the same step.
• Each review has a reply or a log note, and the weekly message went out.
• The front desk can say the do-not list without looking.

The mistake people make in Step 7

They set a review goal for each location. Review goals tend to turn into quotas, which Google bans.

Step 8: Build a One-Page Monthly Report

Time: about 45 minutes a month. You need: access to Search Console and each profile, and the log. Google says many Search Console users need only a quick check-up about once a month, unless Google alerts them to a problem (Google Search Console Help, 2026). Add your site and prove you own it; SEO for Private Practice 2027 walks through the setup. You can verify through the company where you bought your web address, or with a small file or a short tag on your site (Google Search Console Help, 2026). This verification tag is not a tracking tool. You do not need Google Analytics for this report, and the rules section below explains why to be careful with it.

Copy this table into the log, with one column for each location and one for last month. The right-hand column shows what a change may mean. It does not promise anything.

On the new-patient row, Google says performance data is not available for custom booking links, so count new patients yourself (Google Business Profile Help, 2026). The Google help pages we checked do not describe which numbers a profile itself shows, so this guide does not tell you what to expect there. Keep any report to counts and trends, with no patient details.

How you know Step 8 worked

• Two months of columns sit side by side, so you can see change over time.
• Someone other than the owner has read the page and asked a question about it.

The mistake people make in Step 8

They judge a change after three days. Google suggests waiting a few weeks.

Should You Do It In House or Hire an Agency?

Google says that if you run a small local business, you can probably do much of the work yourself (Google Search Central, 2026). Google's statement is about small local businesses. Whether it fits a multi-location clinic is our reading. The jobs are the same kind for a clinic, and much of the work is checking facts and answering reviews, which your own staff know best.

The table shows cost and time. Your time is our planning estimate. For current prices of paid local tools, see Top 10 SEO Tools for Private Practice 2027.

Before any tool touches patient names or contact details, ask whether the vendor will sign a business associate agreement, or BAA. A BAA is the signed contract HIPAA requires when a vendor handles patient information for a clinic. For the questions to ask an agency and the warning signs, see SEO for Private Practice 2027.

Keep control of your accounts

• You own every profile. Google says an outside company that manages a profile must keep the owner informed and transfer ownership immediately on request. Add the agency as a manager, not the owner (Google Business Profile Help, 2026). For an audit, Google says to give read access to Search Console only (Google Search Central, 2026).
• Ask for the tags. Ask for a list of every tracking tool they plan to add. Say no to any on booking or portal pages unless your privacy contact agrees.
• Ask for the pages. Ask them to explain each page they plan to create. Mass-made town pages are the tactic to avoid.
• Approve every invoice. The FTC warns that scammers send small businesses fake invoices for things they never ordered, such as search engine optimization (FTC, 2026). Name one person who approves invoices.

Google says you are ultimately responsible for what companies you hire do. Texas says a licensee who hires others to advertise remains responsible (Texas Behavioral Health Executive Council, 2026). That is why you keep control.

Your First-Quarter Plan, About 13 Weeks

Step by step

Your first-quarter plan

About 1 to 3 hours a week, plus the 60-minute routine from week 3.

1. Week 1: Name your owner, backup and clinical lead

   Move every account to the shared clinic email and remove anyone who has left. About 2 hours (Step 1).

2. Week 2: List every listing and profile

   Search your name, addresses and phones, and fill in the log. About 2 hours (Step 3).

3. Week 3: Audit the tags on your website

   Ask whoever built or hosts your site, and each tool's vendor, for a list of tools that run on booking, portal and intake pages. Remove tags or get a BAA before you change any booking link. About 1 hour (rules section).

4. Weeks 3 to 4 onward: Start each location's verification

   One location at a time. Postcards can take weeks. About 1 to 2 hours each (Step 2).

5. Week 5: Decide who gets a profile of their own

   Use the three questions. The clinical lead signs off. About 1 hour (Step 2).

6. Weeks 5 to 7: Write one page for each location

   Use the Step 4 list. About 2 hours each (Step 4).

7. Weeks 7 to 9: Write or refresh each provider page

   The clinical lead approves each one. About 30 minutes each (Step 5).

8. Weeks 9 to 10: Start the review routine

   Do the ethics check first. Then set up one link per location, one neutral message and a written do-not list. About 2 hours (Step 7).

9. Week 11: Set up Search Console

   Add your site, prove you own it and check back in a few days. About 1 hour (Step 8).

10. Week 12: Write the join-and-leave checklist into your hiring and exit steps

    About 1 hour (Step 6).

11. Week 13: Fill in your first monthly report

    Then decide whether to keep going in house or ask for quotes. About 1 hour (Step 8).

12. Every month after: Repeat the 45-minute report

    Re-read each profile, page title and review rule once a year.

If new enquiries start to arrive faster than you can track them, see Do You Need a CRM for Your Private Practice?.

Mistakes That Cost Practices Visitors

1. A page for every town with the same text. Google's spam policy calls this doorway abuse (Step 4).
2. A new profile to fix an old one, or town names in the profile name. The first makes a duplicate. The second could get the profile suspended (Steps 2 and 3).
3. One person's email as the only owner. When that person leaves, so does your control.
4. Review quotas, rewards or provider-named requests, and replies with details of care. One psychiatric practice paid $30,000 over four such replies (Step 7).
5. Tags on booking or portal pages. A cookie banner does not make that safe, according to HHS, the US health department.

What Rules Apply to a Clinic's Reviews, Website and Marketing?

This is general information, not legal advice. Check with your own lawyer or licensing board. Honest claims about results and credentials are covered in Step 5b.

Replying to reviews

For negative reviews, Google says to reply professionally and briefly. Never share a reviewer's private information or make personal attacks. If the situation is complex, invite the reviewer to continue by phone or email (Google Business Profile Help, 2026).

HHS enforcement shows the cost of getting it wrong. HHS's Office for Civil Rights settled with Manasa Health Center, a psychiatric practice, after it disclosed the protected health information of four patients in replies to their negative Google reviews. It paid $30,000 (HHS Office for Civil Rights, 2023). That page is a settlement, not a reply script. Google's page does not say whether a clinic may confirm someone is a patient. So do not confirm it. Here is a labelled illustration of safe wording, which is our suggestion and not an HHS or Google script: "Thank you for sharing your feedback. We take every concern seriously. Please call the front desk at the number on our profile so we can listen." Have the clinical lead and privacy contact approve a short bank of reply wordings.

Testimonials on your own site

HHS settled with Complete P.T., a physical therapy practice, for $25,000. It had posted patient testimonials with full names and face photos without valid HIPAA authorizations (HHS Office for Civil Rights, 2016). The FTC says a business that puts testimonials on its own website is not merely hosting them, and it can be liable if they are fake or false. Reviews you feature in your marketing also become testimonials (FTC, 2024).

A "results may vary" line does not fix a testimonial, according to the FTC's own example in its Endorsement Guides (eCFR, 2026). The simplest house rule, which is our advice, is to put no patient quotes on your site. The ethics-code limits for clinicians are in Step 7b, and SEO for Therapists 2027 explains them.

The FTC review rule

The FTC's rule on reviews and testimonials has been in effect since October 21, 2024. Its definition of "business" includes an individual, partnership or corporation that sells services, so a clinic is covered. The rule bans writing or selling fake reviews, and it bans rewards tied to a particular sentiment. It also bans threats to suppress reviews. Its exceptions protect asking all your customers for reviews in a general way. The FTC says courts can impose civil penalties for knowing violations (FTC, 2024; eCFR, 2026). This guide does not list a penalty amount.

Tracking tools on booking and portal pages

Tracking tools are defined in Step 1a. HHS's page on online tracking does not spell out every case of who is covered by HIPAA. For a clinic that takes only cash, that is unsettled, so ask your lawyer rather than assume (HHS Office for Civil Rights, 2024). Other laws can apply anyway. In March 2023 the FTC announced a proposed order that would require the online counseling company BetterHelp to pay $7.8 million for sending email addresses and health questionnaire answers to ad platforms. That case came under the FTC Act, not HIPAA (FTC, 2023).

One part of HHS's bulletin was struck down. On June 20, 2024, a federal court in Texas vacated one idea in the bulletin. That idea is that HIPAA is triggered whenever a tool links a visitor's IP address to a visit to a public page about health conditions or providers. An IP address is the number that identifies a device on the internet. The court said this did not limit other guidance in the bulletin. HHS's page still says it is evaluating its next steps. The bulletin itself is not law. The HIPAA rules are.

What this means for your clinic site:

1. Keep marketing tags off logged-in pages. HHS says tracking tools on pages where a person must log in, such as a portal or telehealth room, generally have access to protected health information. Google says not to put Google Analytics tags on those pages.
2. Be careful on booking pages. HHS says a page that lets people schedule an appointment without logging in may have access to health information. Examples are an email address or a reason for a visit that the person types.
3. Watch login and sign-up pages. If a tool collects what a person types there, HHS treats it as a disclosure covered by the HIPAA rules.
4. A cookie banner does not fix it. HHS says accept-or-reject banners are not a valid HIPAA authorization, and listing a tool in your privacy policy does not permit sharing information with it.
5. A vendor that receives booking details needs a BAA. HHS says the vendor is then a business associate. A promise to strip out patient details is not enough.
6. Google Analytics has no BAA. Google makes no claim that it satisfies HIPAA and does not offer business associate agreements for it (Google Analytics Help, 2026). Keep names, emails and health details out of page addresses and titles (Google Analytics Help, 2026).
7. No remarketing lists for health pages. Google's policy says that if you collect sensitive information, you may not use Google Analytics for interest-based advertising (Google Analytics Help, 2026).

The Google HIPAA pages we checked do not list Business Profile (Google Workspace Admin Help, 2026), so put no patient information in a profile, post, photo or reply.

Booking pages connect to forms, so read How to Connect Online Booking and Intake Forms to Your Practice Website (2027) before you add any tool. Top 10 SEO Tools for Private Practice 2027 goes deeper on tracking tools.

Is your website accessible?

HHS's Section 504 rule requires recipients of HHS funding with 15 or more employees to meet WCAG 2.1 Level A and AA from May 11, 2027, with limited exceptions. Recipients with fewer than 15 employees have until May 10, 2028 (eCFR, 2026). WCAG is short for the Web Content Accessibility Guidelines. Whether a clinic that takes only private pay or commercial insurance is a recipient is not settled in these sources, so ask your lawyer. SEO for Private Practice 2027 covers website accessibility more fully.

Where Your Booking Page Fits

Google wants the booking link on each location's profile to lead to a page for that location. So ask any booking tool whether each location can have its own address. ClinikEHR is an all-in-one EHR (electronic health record) with a professional online booking page on every plan, including Free. It is not an SEO tool, and it does not build websites or run Google profiles. On the Team plan, custom domains let booking pages use an address you own, such as book.yourclinic.com, with a secure connection added automatically. That may help keep your site's value on your own address.

Frequently Asked Questions

How many Google profiles does a clinic with three locations need?

One for each location. Google says not to create more than one page for each location of your business, in one account or several. All locations in the same country should use the same clinic name, with limited exceptions. Public-facing providers may qualify for profiles of their own, as the next question explains.

Should every provider have their own Google profile?

It depends on the provider. Google says a practitioner who is public-facing and can be contacted directly at the verified location during stated hours should create their own profile. Whether your clinic wants the extra upkeep is your decision, and our advice is to start with the clinic profile. Google's examples name doctors and dentists, not therapists, so a therapist may qualify, but Google does not say so. The clinic keeps its own profile for the location. A provider's profile uses only the person's name, and front-desk staff should not have profiles.

Can we make a page for every town we serve?

Make a page only for a place where you really have an office or serve patients, with its own real details. Google's spam policy names pages aimed at specific cities that send people to one page as doorway abuse. It also lists blocks of text naming cities a page is trying to rank for as a spam sign. Google's pages do not say how different two location pages must be.

What happens if our clinic has duplicate Google listings?

Google says a profile it treats as a duplicate will not show on Google Search or Maps. Duplicates can come from a second profile at the same address, a profile made for each service, or an old profile after a move. Remove a duplicate you made yourself, or ask to merge it on Google Maps. Merged reviews combine, but replies may be lost, so save your replies first.

Can staff ask patients for Google reviews, and can we thank them with a small gift?

No gifts. Google treats free or discounted goods or services in exchange for a review as fake engagement and strictly prohibits it. If your clinic has psychologists, counselors, social workers or family therapists, ask the clinical lead to check their ethics code before staff ask current clients. These codes bar soliciting testimonials from current clients, and the sources we read do not say whether a Google review request counts. See our guide SEO for Therapists 2027. After that check, staff can ask each patient the same way, once, after a visit. Google also says not to pressure people on the premises, set staff quotas, ask only happy patients or ask for reviews that name a staff member.

How should we reply to a bad review?

Reply politely and briefly, and do not share anything private. HHS settled with a psychiatric practice for $30,000 after it replied to four patients' Google reviews with health information. Do not confirm that the person was a patient. Thank them, say you take concerns seriously and invite a phone call. This wording is our suggestion, not an HHS or Google script.

Can we use Google Analytics on our booking pages?

Google says it offers no business associate agreement for Google Analytics and tells HIPAA-regulated customers not to put its tags on logged-in pages. HHS says booking pages can expose health information when people type details, and a cookie banner does not fix that. You do not need Analytics for this guide, because Search Console shows how your pages appear in Google. Ask your privacy contact or lawyer before adding any tracking tool.

Should a clinic hire an SEO agency?

Google says a small local business can probably do much of the work itself. Whether that fits a multi-location clinic is our reading. If you hire help, keep ownership of your profiles and give read-only Search Console access at first. Be wary of anyone who guarantees a number-one ranking. Google says you are ultimately responsible for what companies you hire do. Our guide SEO for Private Practice 2027 lists questions to ask and warning signs.

Conclusion

A multi-provider clinic is found one location at a time. Give each real location one profile and one honest page, and keep the details the same everywhere.

Name an owner, a backup and a clinical lead, and run the 60-minute routine every week. Nobody can promise a ranking, but careful, steady work on accurate information is the part you control.

ClinikEHR is the EHR we build. Its pricing page lists a Free plan at $0 for up to 50 clients and 2 staff, with no card needed. Essential is $99.90 a month with 3 providers included. Team is $250 a month with 5 providers included. Plans are month to month. You can compare costs in the EHR cost calculator.

Related Articles

• SEO for Therapists 2027: A Step-by-Step Beginner's Guide to Getting Found
• SEO for Private Practice 2027: A Beginner's Guide to Showing Up When Patients Search
• Top 10 SEO Tools for Private Practice 2027 (Free and Paid, With Prices)
• How to Boost Visibility for Your Private Practice 2027: A Practical Plan for the First 90 Days
• Social Media Marketing for Therapists 2027: A Beginner's Guide to Showing Up Without Crossing the Line
• Google Business Profile for Telehealth Practices 2027: Setup, Verification & SEO
• Best Booking Pages for Private Practice 2026: Turn Website Visitors into Booked Clients
• How to Connect Online Booking and Intake Forms to Your Practice Website (2027)
• Do You Need a CRM for Your Private Practice? (2027 Decision Guide)
• How to Get Therapy Clients Online in 2026: Complete Marketing Guide for New Private Practices

Facts are as of the dates shown. Check the linked sources for updates. This is general information, not legal or professional advice.