Google Business Profile Posts for Dentists: What You Can and Can't Say

Every list of Google post ideas tells you to share your work. A bakery can photograph the cake. A dentist cannot photograph the patient, name the procedure, or describe the result without walking into HIPAA, Google's own content policy, or both.

So most practices post nothing. In our audit data, 80 of 129 healthcare profiles had no post in the last 30 days.

Here is what each rule actually says, what a dental or medical practice can post safely, and what our data shows about the practices that do.

What Google Lets a Dental Practice Post

Google's help page on posts says you can post "to share announcements, offers, updates, and event details directly with your customers on Search and Maps." Nothing in that sentence excludes healthcare. The post types are the same for a practice as for a pizzeria: Updates, Offers, and Events, each with an optional photo and button.

The one line Google draws for healthcare is in its tips for posts. Quoted in full:

"Regulated goods and services: You can use posts if you offer products or services in a regulated industry, but do not include content about the products. These industries usually include adult services, alcohol, tobacco, pharmaceutical products, recreational drugs, health and medical devices, gambling services, fireworks, weapons, and financial services."

Read that carefully. You are in a regulated industry, and you may post. What Google does not want is content about the regulated products.

For a practice, that means the aligner brand, the implant system, the whitening gel, the prescription, the device. Its separate restricted-content policy spells out the prohibited forms: "deals, coupons, pricing information or other promotions for a restricted product or service," links to a page where the product can be bought, and contact details for buying it.

A post about your Saturday hygiene appointments is about a service. A post offering 20% off a named whitening kit is about a product, and Google's policy says it should not display "promotional offers for restricted goods or services." The service is the safe subject.

Two more Google rules catch practices regularly:

• Phone numbers in the post text. Google's posts policy: "To avoid fraud or abuse, we may remove posts with unverified contact information. This includes phone numbers, email addresses, and social media handles." Attach the Call now button instead, which uses the verified number on your profile.
• Photos with text on them. Google's media tips say to "avoid adding elements such as borders, text, or collaged images." A promo graphic with your phone number, an arrow, and a price is the single most common reason a post gets rejected. If yours does, our guide to why a Google post gets rejected walks through the fix.

And one sentence from the posts content policy that matters more for you than for any other business: "You're responsible for making sure that your posted content complies with all applicable laws and regulations." Google does not check your post against HIPAA or your state dental board. That part is yours.

The HIPAA Line: What a Post Can Never Contain

The HIPAA Privacy Rule defines marketing as "a communication about a product or service that encourages recipients of the communication to purchase or use the product or service." A Google post with a Book button is that communication.

The rule then says a covered entity "must obtain an authorization for any use or disclosure of protected health information for marketing," with two exceptions that do not help here: a face-to-face conversation, and a promotional gift of nominal value. A public post is neither.

So the question for every post is whether it contains protected health information about anyone. The rule's de-identification standard lists 18 identifiers, and the ones that show up in practice marketing are names, dates "directly related to an individual," and "full face photographic images and any comparable images." A patient's first name under a smiling photo, with a caption about the crown they just got, is three identifiers in one post.

This is not theoretical. In an October 2019 press release, HHS announced that Elite Dental Associates in Dallas "has agreed to pay $10,000 to the Office for Civil Rights (OCR)" to settle potential Privacy Rule violations. OCR found the practice "had impermissibly disclosed the protected health information (PHI) of multiple patients in response to patient reviews on the Elite Yelp review page," and that it "did not have a policy and procedure regarding disclosures of PHI to ensure that its social media interactions protect the PHI of its patients."

The OCR director's summary: "Social media is not the place for providers to discuss a patient's care."

That case was about review replies, and the same rule governs posts. We covered the reply side in our dental office review response guide. The post side is easier in one way, because you choose the subject, and harder in another, because the temptation to show results is constant.

Google has its own version of this rule. Its content policy lists, under personal information, "Personally identifiable information and other personal information about yourself or others including financial information, medical information or personal identification information," and separately "their face in a photograph or a video" posted without consent. So a patient post that survives HIPAA review can still be removed by Google.

How often practices slip

We looked at the reviews on 57 dental profiles connected to ReplyOnTheFly, 16,308 English-language reviews with text, to see how much health information arrives on its own. Patients volunteer it constantly:

The patient is free to say all of that. The practice is not free to repeat it. Yet in the 6,933 of those reviews that had an owner reply, 9.9% of replies said "your visit," "your appointment," or "your treatment," and where the review named a procedure, 26% of the replies named it back. Those replies confirm patient status and treatment in public, which is exactly what OCR cited in the Elite case.

Posts carry the same risk with a different trigger. Nobody writes "thank you for choosing us for your root canal, Maria" in a post by accident. They write it on purpose, because it is a good story. It is also a disclosure.

Patient Photos, Before-and-Afters, and Testimonials

Three kinds of post need a signed form before they exist, and the form has to name this use.

Patient photos. A face is an identifier. Get a written HIPAA authorization that says the photo may be used in the practice's online marketing, including its Google Business Profile, and keep it on file. A general consent to treatment does not cover marketing, and the Privacy Rule requires the authorization before the use. If the patient later revokes it, the post comes down.

Before-and-after images. Same authorization, plus a second law. The FTC's endorsement rule says an ad "containing an endorsement relating the experience of one or more consumers on a central or key attribute of the product will likely be interpreted as representing that the endorser's experience is representative of what consumers will generally achieve." If your best case is not typical, the rule says to "clearly and conspicuously disclose the generally expected performance." A short post has no room for that disclosure, which is a good reason to keep before-and-afters on a page of your website that can carry it.

Reposting a review as a testimonial. The patient published it, so it feels public. But the practice re-publishing it, with the patient's name, in a communication that encourages booking, is the practice using PHI for marketing. Treat it like a photo: authorization first, or leave it on the review where the patient put it. A post that quotes a happy reviewer is routine for a restaurant and a form-first decision for you.

What you can photograph without any form: the empty operatory, the reception area, the sterilization room, the new scanner, the view from the chair, the coffee station, and your team. Google's media tips favor exactly this, asking that photos focus on the location and calling out "selfies that emphasize a person or group" as less helpful. Staff still count as people, so get a one-line written okay from each employee who appears, and post nothing about anyone who declined.

12 Posts a Dental or Medical Practice Can Make Safely

Every idea below is about the practice, not a patient, and none is about a regulated product. Each one fits in a short post, and most work best with one real photo.

1. Meet the team. One post per clinician or hygienist: name, role, one human detail, their photo with their written okay.
2. A new hire. "Dr. Patel joins us in January and is taking new patients" is an update, not a promotion.
3. The room. The operatory after a refresh, the kids' corner, the new chairs. Describe the appointment experience, not the device.
4. Hours and closures. Holiday weeks, a half day for training, the Saturday you added. Pair the post with a special-hours entry so the profile itself is right; our guide to holiday hours on Google Business Profile covers that side.
5. New patients and insurance. Which plans you take, whether you are accepting new patients, how to book a first visit.
6. What a first visit looks like. The paperwork, the X-rays, how long it takes, what to bring. One of the most-asked questions on every practice's phone line.
7. Seasonal reminders. Back-to-school checkups, use-it-or-lose-it benefits before December, mouthguards before spring sports.
8. General oral-health tips. Flossing, sensitivity, what to do if a filling falls out on a weekend. Advice to the public, never to a person.
9. Emergency instructions. How to reach you after hours and what counts as an emergency. Use the Call now button rather than typing the number.
10. Community. The school visit, the charity run, the food drive box in reception.
11. Accessibility and comfort. Step-free entry, sedation options described in plain words, headphones and blankets. Describe the service, not the product.
12. An Offer post on a service. A new-patient exam price or a hygiene special, with dates and terms. Google's Offer type adds the View Offer button and asks for a start and end date; our guide to Google Business Profile offer posts covers how to write one. Check your state board's advertising rules before stating a price or the word "free," because Google does not check them for you.

Three things to leave out of every one of these: a patient, a product, and a claim you cannot support. "Painless," "guaranteed," "best dentist in town," and "#1 rated" are the words that bring a state board letter. Google's own tips ask you to avoid "text that adds no value," which describes all four.

Which Profile Should You Post On?

Practices often have two or more profiles: one for the practice, one for each dentist. Google's guidelines define "an individual practitioner" as "a public-facing professional, typically with their own customer base," and name doctors and dentists as examples. When "the practitioner is one of several public-facing practitioners at this location," the guidelines say "the organization should create a Business Profile for this location, separate from that of the practitioner," and that the practitioner's profile title "should include only the name of the practitioner."

Post practice news on the practice profile. Hours, new patients, the team, the renovation, the holiday closure: all of it belongs there, because that is the profile people find when they search "dentist near me." A practitioner's profile gets the posts that are about that dentist: a new credential, a talk they gave, a change in their days.

Do not copy the same post to both. Google's content policy prohibits "posting the same content multiple times either from the same account or multiple accounts."

How Often, and How to Keep It Going

Posts stop showing prominently after about a week, so weekly is the rhythm that keeps the profile looking alive. In practice, almost nobody in healthcare manages it.

We pulled the latest free audit for every healthcare profile connected to ReplyOnTheFly, 129 profiles across dentists, clinics, surgeons, and therapists, audited between March and October 2026:

That is slightly better than the 75% no-recent-post rate across every business type in our local SEO cost analysis, but it still means two of every three practices show a visitor nothing new. A practice that posts once a week, about nothing more exciting than its hours and its team, is more current than most of the profiles it competes with.

Posting does not move your Maps ranking. Google's guide to local ranking names relevance, distance, and prominence, and never mentions posts. What a post does is give the person already looking at your profile a reason to pick you over the next practice in the list, and for a decision that involves someone's mouth, the practice that looks staffed and current wins that moment.

The practical problem is the person. The office manager has the phone, the photos, and the judgment, and also the front desk. Two habits make weekly possible:

• Batch the safe posts. Team intros, the rooms, first-visit guides, and seasonal reminders can be written a month ahead and scheduled. Google's own editor has a "Schedule this post" switch, and the ReplyOnTheFly SEO Post Scheduler will draft and publish them from your services and city on a weekly or daily cadence. Its writing rules forbid customer quotes, testimonials, review counts, and star ratings in any post, and it writes only from the business details you provide, never from your reviews, so a scheduled post cannot name a patient. On the 21 healthcare profiles using it, 1,130 posts have gone out since April 2026, 91% with a Book button and almost none with price or discount language.
• Keep the human posts human. A staff birthday, the new puppy in reception, the school visit: those get written by the manager on the day, with the two-question check above.

If you want to see how your profile scores right now on posts, photos, and the other factors Google weighs, the free Google Business Profile audit checks nine of them in about thirty seconds, no signup needed. Dental practices can also see how the whole workflow fits a front desk on our page for dental offices.

Frequently Asked Questions

Conclusion

Google Business Profile posts for dentists and medical practices come down to two rules that fit on an index card. Google's: post about services, not regulated products. HIPAA's: no patient, no photo, no result without a signed authorization that names the use.

Inside those lines there is more than enough material for a post a week: the team, the rooms, the hours, the first visit, the seasonal reminder, the community day. Two of every three healthcare profiles in our data show nothing from the last month, so a practice that keeps that rhythm looks more alive than most of its neighbors, without ever discussing a patient's care in public.

For the rest of the posting playbook, from photos to buttons to cadence, start with our complete guide to Google Business Profile posts. And if your week has no room for it, the scheduler was built for exactly this front desk.