SEO for Dentists: Schema, Reviews, and the HIPAA Trap

A dental practice owner who reads the top guides for this keyword comes away with a list: claim your Business Profile, get reviews, write blog posts, be patient. Every one of those is correct and none of them is specific enough to act on.

I read the three ranking guides before writing this. The longest runs about 4,500 words. Between them they contain zero lines of structured data you could paste, no Core Web Vitals thresholds, no rule about who is allowed a Business Profile in a multi-dentist practice, and nothing at all about the one mistake in this vertical that has produced actual federal settlements.

That last gap is the strange one. Responding to patient reviews is advice every dental SEO guide gives. Two dental practices have paid the US Department of Health and Human Services to settle allegations about exactly that, and no guide ranking for this keyword mentions either case.

This article covers the specific work, in the order a practice owner can do it, with the sources quoted so you can check them. Before anything else, the honest frame, in Google's own words from its guidance on hiring an SEO: "No one can guarantee a #1 ranking on Google." Nothing below is a promise about position or timing.

A dental search returns two different results, ranked by two different systems

When someone searches "dentist near me" or "emergency root canal Dallas", Google returns a map pack and a list of blue links. These are separate surfaces with separate ranking logic, and most dental SEO advice blurs them into one.

The map pack is ranked by your Google Business Profile. Google's local ranking documentation names three factors: relevance, which is "how well a Business Profile matches what someone is searching for"; distance, "how far each business is from the customer who's searching"; and prominence, meaning "how well-known a business is."

Distance is the factor that decides most dental searches, and you cannot change it. A patient standing two blocks from a competitor will usually see that competitor. This is why a single-location practice should measure its map visibility by neighbourhood rather than by a citywide rank check.

The blue links below the map are ranked by ordinary web search, which is where your website, your service pages and your content matter. The same split shapes local SEO in every service vertical, and the mechanics carry over almost unchanged from SEO for contractors.

Google also states plainly on that same page: "There's no way to request or pay for a better local ranking on Google." Any vendor selling map-pack placement as a product is selling something Google says does not exist.

Your Business Profile has rules that decide whether you exist

Most practices treat the Business Profile as a form to fill in. It is closer to a compliance document, and the rules that matter most in dentistry are the ones about practitioners.

Google's guidelines for representing your business allow an individual practitioner to have a Business Profile separate from the practice. The condition is that they "operate in a public-facing role" and "can be contacted directly at the verified location during stated hours."

That is a real opportunity in a group practice, and it comes with a formatting rule people get wrong. Google states: "The title of the Business Profile for the practitioner should include only the name of the practitioner, and shouldn't include the name of the organization."

So in a four-dentist practice you may legitimately have five profiles: one for the practice, one for each dentist who sees patients directly. What you may not do is give one dentist several profiles for several specialities. Google is explicit: "A practitioner shouldn't have multiple Business Profiles to cover all of their specializations."

The rule that suspends profiles is the one about duplicates. "Do not create more than one page for each location of your business, either in a single account or multiple accounts." Practices acquire this problem by accident, usually through an old listing created by a former marketing vendor.

On naming, Google requires that "Your name should reflect your business's real-world name, as used consistently on your storefront, website, stationery, and as known to customers." A profile named "Smile Dental Implants Veneers Invisalign Austin" is a guideline violation, and stuffing it is a common reason a competitor reports you.

Here is a practical audit sequence before you optimise anything:

The review reply that cost a dental practice $23,000

Every guide tells you to respond to reviews. None of them tells you that in dentistry a review reply is a disclosure of protected health information, and that HHS has settled cases on precisely this.

In December 2022, HHS announced a settlement with New Vision Dental, a California practice. Per the HHS resolution agreement, the complaint alleged the practice "disclosed PHI when it responded to patient posts sometimes providing full names where only Yelp monikers were used by the patients and including detailed information about patient visits and insurance."

The practice paid $23,000 and accepted a corrective action plan running two years from the effective date. Read that first allegation again: the patient used a pseudonym and the practice replied using the patient's real name. That is the entire violation, and it is a natural thing for a practice owner to do.

It was not the first. In October 2019, Elite Dental Associates of Dallas settled for $10,000 with a corrective action plan, over disclosures of patient information in responses to reviews on its Yelp page.

The safe pattern is a reply that confirms nothing. It does not acknowledge the person is a patient, does not name a treatment, does not mention insurance, cost or dates, and does not correct the reviewer's version of events. It offers an offline channel and stops.

A reply like "We take all feedback seriously and would like to discuss this with you directly. Please call our office manager at 555-0100" discloses nothing. A reply like "We are sorry your crown appointment ran late, Sarah, and your plan did cover the second visit" discloses treatment, identity and insurance in one sentence.

Train whoever handles reviews on this rule specifically, because the person replying is usually a front-desk employee working from an SEO checklist that says "respond to every review."

The acquisition side has its own rules, set by Google rather than HHS. The Maps contribution policies prohibit merchants from offering "incentives, such as payment, discounts, free goods and/or services, in exchange for posting any review or revision or removal of a negative review."

What is allowed is asking. Google permits merchants to "solicit or encourage the posting of content that does represent a genuine experience, without offering incentives to do so or attempting to influence the rating or the contents of the review." A whitening discount for a five-star review is a policy violation. A card at checkout with a QR code to your profile is not.

Dentist schema, and the JSON-LD you can paste

Structured data will not rank you. It tells Google unambiguously what your practice is, where it is and when it is open, which is worth doing correctly once and then leaving alone.

Google's LocalBusiness documentation requires only two properties, name and address, and gives one instruction that most dental sites ignore: "Use the most specific LocalBusiness sub-type possible."

For a dental practice that subtype is Dentist. On schema.org, Dentist sits under several ancestor chains at once, including Thing > Organization > LocalBusiness > MedicalBusiness > Dentist and Thing > Place > LocalBusiness > Dentist. Using LocalBusiness when Dentist exists throws away the only signal the markup carries.

Here is a complete block for a single-location practice. It goes in the page source, not in a tag manager, and one per site is enough.

<script type="application/ld+json">
{
  "@context": "https://schema.org",
  "@type": "Dentist",
  "name": "Riverside Family Dental",
  "url": "https://riversidefamilydental.com/",
  "telephone": "+1-512-555-0100",
  "address": {
    "@type": "PostalAddress",
    "streetAddress": "1400 South Congress Avenue, Suite 210",
    "addressLocality": "Austin",
    "addressRegion": "TX",
    "postalCode": "78704",
    "addressCountry": "US"
  },
  "geo": {
    "@type": "GeoCoordinates",
    "latitude": 30.2500,
    "longitude": -97.7500
  },
  "openingHoursSpecification": [
    {
      "@type": "OpeningHoursSpecification",
      "dayOfWeek": ["Monday", "Tuesday", "Wednesday", "Thursday"],
      "opens": "08:00",
      "closes": "17:00"
    },
    {
      "@type": "OpeningHoursSpecification",
      "dayOfWeek": "Friday",
      "opens": "08:00",
      "closes": "13:00"
    }
  ],
  "priceRange": "$$"
}
</script>

One property to leave out deliberately: aggregateRating and review. Google's documentation states these are "only recommended for sites that capture reviews about other local businesses." Marking up your own testimonials is a misuse of the property, and it is the single most common piece of bad advice in local SEO.

Validate the block before you ship it. Paste the rendered page into the Rich Results Test, and check that the JSON parses at all:

curl -s https://riversidefamilydental.com/ \
  | sed -n '/application\/ld+json/,/<\/script>/p' \
  | sed '1d;$d' \
  | python3 -m json.tool

If your site is a modern JavaScript application rather than a template on a dental website platform, the injection details matter and are covered in Next.js SEO in the App Router. On the common dental platforms it is a code block in the site header setting.

Service pages, city pages, and the line Google calls doorway abuse

The standard dental SEO upsell is a page per treatment per town: "Invisalign in Round Rock", "Invisalign in Pflugerville", "Invisalign in Cedar Park", each a copy with the place name swapped.

Google's spam policies define doorway abuse as "sites or pages are created to rank for specific, similar search queries" that "lead users to intermediate pages that are not as useful as the final destination." The listed example is direct: "Having multiple domain names or pages targeted at specific regions or cities that funnel users to one page."

The same page defines scaled content abuse as "many pages are generated for the primary purpose of manipulating search rankings and not helping users", and names "using generative AI tools or other similar tools to generate many pages without adding value for users" as an example. The policy is about value, not about tooling.

The distinction that survives this policy is whether the page contains something true only of that location. A page for a satellite office with its own address, its own hours, its own dentists and its own parking instructions is a real page. A page whose only local content is the town name in the H1 is the example in the policy.

For a single-location practice the honest answer is that you do not need city pages at all. You need one strong page per treatment you actually want more of, written for someone deciding whether to book it.

Sort those pages by distance from a booking rather than by search volume:

The cost pages are the ones practices avoid and patients search hardest for. Publishing a range, what affects it and which plans you accept beats a page that says "contact us for pricing", which is the answer that sends someone back to the results.

Speed, measured the way Google measures it

Dental sites are slow for three predictable reasons: an uncompressed hero photo of the reception area, a chat widget loaded on every page, and a third-party booking embed.

The thresholds are public. On web.dev, a good Largest Contentful Paint "should occur within 2.5 seconds of when the page first starts loading", Interaction to Next Paint should be "200 milliseconds or less", and Cumulative Layout Shift should stay at "0.1 or less".

The detail that changes how you test: these are assessed at "the 75th percentile of page loads, segmented across mobile and desktop devices." Your own phone on the practice wifi is the fastest quarter of your traffic, not the number Google uses. Note also that INP replaced FID and became a stable Core Web Vital in 2024, so any guide still naming FID predates that change.

Check a real page rather than trusting a plugin dashboard:

curl -s "https://www.googleapis.com/pagespeedonline/v5/runPagespeed?url=https://riversidefamilydental.com/&strategy=mobile" \
  | python3 -c "import sys,json; d=json.load(sys.stdin)['lighthouseResult']['audits']; print('LCP', d['largest-contentful-paint']['displayValue']); print('CLS', d['cumulative-layout-shift']['displayValue'])"

The usual fix is not a rebuild. It is exporting the hero image at the width it is actually displayed, loading the chat widget after first interaction instead of on page load, and giving the booking embed a fixed height so it stops shifting the layout underneath a thumb. The same three fixes carry the SEO for photographers case, where the images are the product.

Health content, E-E-A-T, and why trust outranks expertise

Dental content sits in the category Google treats most carefully, and the practice owner has an advantage here that no agency writer can buy.

Google's page on creating helpful content describes experience, expertise, authoritativeness and trustworthiness, then adds the ranking most people miss: "Of these aspects, trust is most important. The others contribute to trust, but content doesn't necessarily have to demonstrate all of them."

The same page states that its systems "give even more weight to content that aligns with strong E-E-A-T for topics that could significantly impact the health, financial stability, or safety of people", which it calls Your Money or Your Life topics. Dental treatment content is squarely in that category.

Practically, this means the byline is not decoration. A page about extraction aftercare written under a named dentist with credentials, a licence jurisdiction and a real biography demonstrates something a page bylined "Admin" cannot.

Google frames the work as "Who, How, and Why": be clear about who created the content, be transparent about how it was made including any automation, and create it primarily to help people. A practice that publishes under its dentists' names, dates its reviews and says who reviewed a page medically has answered all three.

This is also the argument against buying generic dental blog content in bulk. Fifty syndicated articles under no author on a YMYL subject is the exact profile the helpful content guidance describes as a problem, and the same trap the SEO for SaaS piece describes in a different vertical.

What AI search actually changes for a dental practice

Something with an AI Overview at the top is what a patient now sees for most dental queries. The Overview was present at position one for this article's own keyword when the SERP was pulled.

Google published an AI optimization guide, last updated 2026-07-10, and its most useful section lists what you do not need to do. On special files: "You don't need to create new machine readable files, AI text files, markup, or Markdown to appear in Google Search", and doing so "will neither harm nor help your site's visibility."

On markup, the same guide is blunt: "Structured data isn't required for generative AI search, and there's no special schema.org markup you need to add." The Dentist block above is worth having for ordinary search results, not as an AI play.

The line that settles the argument for a practice owner deciding where to spend: "The best practices for SEO continue to be relevant because our generative AI features on Google Search are rooted in our core Search ranking and quality systems."

There is one eligibility rule worth checking, because a site can be excluded by an old setting. To appear in these features "a page must be indexed and eligible to be shown in Google Search with a snippet." A nosnippet directive added during the 2024 AI panic is enough to remove your pages.

Assistants outside Google are a separate question with separate crawlers and separate rules, covered in LLM SEO and, for the specific case of ChatGPT, in how to rank on ChatGPT.

Measuring it without lying to yourself

The measurement most practices accept is a monthly ranking screenshot, which is the least useful artefact in this field. Rankings vary by the searcher's exact location, which for a dental practice is the dominant variable.

Measure these instead:

• New patient calls and forms, tagged by source, in your practice management software rather than in an analytics dashboard.
• Business Profile actions: calls, website clicks, direction requests, bookings, in the profile's performance report.
• Search Console impressions and clicks by page, which tells you whether your implants page is being seen at all.
• Which queries reach the map pack for searches run from the neighbourhoods you actually serve.

On AI surfaces, Search Console's generative AI performance report gives impressions only, grouped by page, country, date and device. There are no clicks, no click-through rate and no query data, so anyone selling you an "AI Overview ranking report" for a dental practice is reporting something Google does not publish.

Set the baseline before you change anything. Export the last three months from Search Console and the profile performance report on day one, because without that snapshot every later number is unfalsifiable.

Where this leaves you

The work above is unglamorous and finite: fix the profile rules, make the review replies safe, ship one correct schema block, write the treatment pages that precede a booking, and fix three performance problems. None of it requires a retainer.

What does not fit in an evening is the ongoing part, which is publishing regularly enough that the treatment and cost pages exist at all. That is where practices stall and where the market splits between agencies charging retainers and self-serve tools. Our own product, syted, sits on the self-serve side at $99 per month for 30 articles published on your own domain, which is a different bet from the one an agency makes; we wrote about what a retainer actually buys and, for the practice owner deciding between channels, SEO versus Google Ads.

That last comparison matters more in dentistry than in most verticals, because the paid market here is among the most expensive in local services. If you are currently buying clicks in that auction, the arithmetic in SEO versus Google Ads is the calculation to run before you renew, and the same trade-off shaped the contractor version of this article.

FAQ

How do you do SEO for a dental clinic?

Start with the Google Business Profile, because it decides the map pack that most dental searches lead with. Fix duplicate listings, use your real-world name without appended keywords, and set up separate practitioner profiles for each public-facing dentist under their own name only.

Then handle the website: one Dentist schema block, a page for each treatment you want more of, cost and insurance pages, and the three usual performance fixes. Reviews come last in the order of work but first in ongoing effort, with a reply policy that discloses nothing.

Why is SEO important for dentists?

Because dental demand is local, immediate and searched rather than browsed. Someone with a broken crown on a Sunday searches, picks from what appears near them, and calls. If your practice is not in that result you were never considered.

The second reason is cost. Dental keywords are among the most expensive in local paid search, so every booking that arrives organically is one you did not bid for.

What is local SEO for dentists?

Local SEO is the work that affects the map pack rather than the blue links: your Business Profile, its categories and hours, review volume and quality, and consistency of your name, address and phone number across the web. It is ranked on relevance, distance and prominence.

Ordinary SEO covers your website's pages, content and technical health. Both matter, and the mistake is treating either one as the whole job.

Do dental practices need city pages for nearby towns?

A single-location practice usually does not. Google's spam policies name "multiple domain names or pages targeted at specific regions or cities that funnel users to one page" as an example of doorway abuse.

A page for a genuine second office with its own address, hours and staff is a real page and not a doorway. The test is whether the page contains anything true only of that location.

Can I reply to a patient's Google review?

You can, but the reply cannot confirm that the person is a patient or reference their treatment, insurance, costs or dates. Two US dental practices have settled with HHS over disclosures made in responses to reviews, for $10,000 in 2019 and $23,000 in 2022.

The safe reply thanks the reviewer generically and moves the conversation offline with a phone number. Anything more specific is a disclosure, including using someone's real name when they reviewed under a pseudonym.

How long does dental SEO take to work?

Nobody can tell you honestly, and Google states that "No one can guarantee a #1 ranking on Google." Business Profile fixes can change map visibility quickly because the profile is a separate system; competitive website rankings are slower and depend on your market's density.

What you can control is the baseline. Export Search Console and Business Profile performance data before you start, then compare against it rather than against a vendor's report.