Reviews for Chiropractors, Massage Therapists and Wellness Practices

By the Expert Reputation team · Updated October 26, 2026

Chiropractors, massage therapists, acupuncturists, and nutritionists live on repeat visits and word of mouth, so a handful of reviews can make a real difference. The rules are less uniform than for physicians or dentists, though. Testimonial limits come from state boards and vary widely. And whether HIPAA applies depends on how you bill, not on your profession. This guide covers where to focus, how to work out whether you're a HIPAA covered entity, and when to ask.

Where wellness clients leave reviews

• Google is the first stop for "chiropractor near me" or "massage near me," and usually where most of your reviews will be. Google lets you ask for reviews, within limits. See our Google reviews guide.
• Yelp matters a lot for massage, spa, and acupuncture businesses in many cities. Its rule is strict: "Don't ask anyone to review your business, be it customers, mailing list subscribers, friends, family, etc." See our Yelp guide.
• Facebook recommendations matter for practices with an active local following. See our Facebook guide.
• Specialty directories. These are listings that prospective clients and referrers search. AMTA's Find a Massage Therapist locator is open to eligible AMTA members who opt in. The NCCAOM Directory lists NCCAOM-certified acupuncture practitioners who choose to be included. Keep your name, address, phone, and services identical across all of them.

State board limits on testimonials

There's no national ethics code that covers all of these professions. Advertising and testimonial rules come mostly from state licensing boards, and they vary a lot. Some states say little. Others set specific conditions.

Minnesota is a clear example. Its Board of Chiropractic Examiners rule (Minnesota Rules 2500.0200, subpart 3) says testimonials "carry with them an implication that the conditions described in the advertisement have been or will be helped by the practitioner." So before a testimonial ad is produced or displayed, the chiropractor "must obtain written consent and have a signed release form from the patient to be kept in the patient's file." The patient has "the right to review the advertisements" first. And statements that are "untruthful, improbable, misleading, or impossible may not be used even if the patient made the statements."

Your state's rules may be stricter, looser, or different for massage, acupuncture, or dietetics, which usually have their own boards. Before you put a testimonial in an ad or on your website, read your board's current advertising rule. Whatever the state, a few points are safe everywhere:

• Get written permission before using a client's words or name in your own marketing.
• Avoid health claims in testimonials you couldn't back up yourself, like "cured my migraines" or "fixed my scoliosis." The FTC's Endorsement Guides (16 CFR 255.2) treat a testimonial about a key result as a claim that the result is typical.
• Disclose connections. If someone got a free or discounted session, or is a friend or relative, disclose it (16 CFR 255.5).

Does HIPAA apply to your practice? The covered-entity test

This is where wellness practices get the most confused. HIPAA doesn't cover everyone who provides health-related services. It covers three kinds of "covered entity": health plans, health care clearinghouses, and "a health care provider who transmits any health information in electronic form in connection with a transaction covered by this subchapter" (45 CFR 160.103).

For a practice, that comes down to two questions, which CMS's Covered Entity Decision Tool asks in order:

1. Do you "furnish, bill, or receive payment for, health care in the normal course of business"? Chiropractic, acupuncture, therapeutic massage, and nutrition counseling all generally fit HIPAA's broad definition of health care. It includes care related to "the physical or mental condition, or functional status" of a person.
2. Do you send any "covered transactions" electronically? These are the HIPAA standard transactions. Examples are health care claims, eligibility checks, claim status inquiries, referral authorizations, and electronic remittance from a health plan.

If both answers are yes, you're a covered entity. If either is no, you're not. A few details matter:

• A billing service counts as you. CMS's decision tool says that if a provider "uses another entity (such as a clearinghouse) to conduct covered transactions in electronic form on its behalf, the health care provider is considered to be conducting the transaction."
• It's about the practice, not the patient. Once your practice is a covered entity, HIPAA protects all of your patients' information, including patients who pay cash.
• Paper-only and cash-only are different. A provider who files only paper claims, or takes no insurance at all, and never sends an electronic standard transaction is not covered.
• Auto and workers' comp claims are a gray area. CMS's decision tool lists automobile medical payment insurance and workers' compensation as "excepted benefits" rather than health plans. If personal-injury billing is a big part of your practice, ask a HIPAA compliance adviser how it applies to you.

What that means by profession

• Chiropractors who bill Medicare or private insurance electronically are covered entities. CMS's covered-entities page names "chiropractors" in its list of providers who are covered when they submit claims electronically.
• Acupuncturists and nutritionists or dietitians who bill insurance electronically, or through a billing service, are in the same position.
• Massage therapists who are paid only by clients, and never bill a health plan electronically, generally are not covered entities. That changes if you start billing insurance electronically, or join a practice that does. If you work inside a clinic that is a covered entity, its HIPAA policies apply to your work there.

Not being a covered entity doesn't mean you can talk about clients in public. State privacy laws, your licensing board's confidentiality rules, and your clients' trust all still apply. For a review reply, act as if HIPAA applies. It costs nothing and protects you either way. See HIPAA and online reviews.

How to reply to reviews

Thank people warmly, but don't confirm they're a client or mention their condition, treatment, or visits:

Thank you so much for the kind words! Our whole team works hard to make every visit relaxing and helpful, and we're glad it shows. — [Practice Name]

For a complaint:

We're sorry to hear this and would like to make it right. Privacy rules keep us from discussing anyone's care online, so please call [Name] at [Phone] and we'll talk it through. — [Practice Name]

Don't write "Glad your back pain is better," "We hope your neck continues to improve," or "You missed three appointments." More examples are in our HIPAA-safe review reply templates.

When to ask recurring patients for a review

Wellness practices have an advantage: most patients come back. That gives you a better moment to ask than the first visit. We suggest asking after the third to fifth visit in an ongoing plan of care, when the patient has had time to notice a difference. For one-off massage or acupuncture clients, the end of a session they clearly enjoyed is the natural time.

Within that, follow the platform rules:

• Ask every patient at the same point, not just the ones who seem happiest. Google forbids businesses to "selectively solicit positive reviews from customers."
• Don't pressure people in the office. Google says businesses should not "require or pressure users to leave ratings or write reviews while on the premises." A card, a sign, or a text with your review link after the visit is fine.
• No rewards. No free adjustment, discount, or raffle for a review. Google bans incentivized reviews, and the FTC's Consumer Reviews and Testimonials Rule (16 CFR 465.4) bans incentives tied to a review's sentiment.
• Not your staff or family. Google treats employees' reviews as a conflict of interest, and reviews by your own officers or managers violate 16 CFR 465.5.
• Never ask on Yelp.

Our guide on how to get patient reviews covers wording, timing, and follow-up. If you'd like requests sent automatically after a set visit, Review IQ can send them to every patient.