GBP: the highest-leverage free listing in local search

What a Google Business Profile is, and why it earns its place

A Google Business Profile is Google's free listing product. It renders your practice on Google Maps, inside the local pack of results that sits above the ordinary blue links, and in the knowledge panel to the right of a branded search. Because those surfaces answer a 'therapist near me' search before any website loads, the profile is usually the highest-leverage free asset a solo practice owns.

Three things make it matter more than a website's home page. It is free. It appears at the exact moment someone is looking for care nearby. And it may already exist without you — Google can auto-generate an unverified listing from public data, which means a profile with the wrong hours or a merged duplicate can be representing you right now. Claiming it is how you take the wheel.

NAP consistency is the quiet ranking factor. Your NAP — name, address, and phone presentation — should read identically here, on your website, and on every other listing. A profile is one entry in a wider set, so if you are deciding which directory profiles actually generate patients, the Google profile is the one to perfect first because it feeds the map. The address you use should also match the local layer of your business registration, so the listing and your licenses tell the same story.

Google assembles the local pack from three broad factors: how relevant the profile is to the search, how close the practice is to the searcher, and how prominent the practice looks — reviews, completeness, and wider web presence all feed prominence. You cannot move your address, but you control relevance and prominence directly, which is why a complete, well-categorized, honestly-reviewed profile can outrank a thinner one a few blocks closer to the searcher.

Claim it, verify it, complete it

Claim the profile, prove you control the practice, then fill every field — in that order. Start at the Google Business Profile manager and search for your practice name and address; if an unverified listing already exists, claim it rather than create a second one, because duplicate listings split your reviews and confuse the map. Google then asks you to verify ownership, usually by mailed postcard, phone, email, or a short video of the location and your credentials.

Verification can take a few days, and the profile stays unpublished until it clears. Once it does, completeness is the job. Google rewards a fully populated profile, and each empty field is a question a prospective patient answers by leaving.

Do the video verification carefully. It is now the common path, and a rushed or unclear video is the most frequent reason a health practice's profile stalls in review.

Categories, the business name, and services — what moves ranking

Your primary category is the strongest lever you control, so choose the most precise match rather than the broadest one — a specific category ranks you for the searches that actually convert. Add secondary categories only for services you truly provide. The business name field is the one place people try to game and the one place Google punishes hardest.

Keep the business name to your real practice name. Stuffing it with keywords — appending 'anxiety therapy near me' to your name — violates Google's representation guidelines and is a common trigger for suspension, which pulls you out of the map entirely while you appeal. Put those terms in the services list and the description instead, where they belong and where they carry no risk.

Telehealth-only or home-based? Hide the address and set a service area. Google lets a practice without a public storefront display a service area instead of a street address; this keeps a home address private while still ranking you in the regions you serve. Fill the services with your actual modalities and populations, because those are the phrases patients type when they are looking for someone like you.

Use the description and services fields as your keyword surface. The description should read as plain, factual prose about who you help and how you work — not a keyword list — while the services entries can name each modality and population directly. Attributes, when Google offers them for your category, let you flag the details patients filter on, such as telehealth availability, the languages you speak, and how accessible the office is.

Reviews — the boundaries you cannot cross

Reviews are the profile's engine and its legal minefield. Two federal rules set the outer bounds. The FTC's 2024 final rule bans fake reviews, reviews you buy, and suppressing or manipulating honest negative reviews, and it carries civil penalties 1Ref 1Federal Trade Commission (2024).Federal Trade Commission Announces Final Rule Banning Fake Reviews and Testimonials.The FTC's 2024 final rule banning fake, purchased, and suppressed reviews — the outer bound on soliciting and managing Google reviews.. Separately, the FTC's endorsement guidance treats review gating — soliciting reviews only from patients you expect to be happy, or routing dissatisfied patients to a private channel so their reviews never post — as deceptive 2Ref 2Federal Trade Commission (2023).FTC's Endorsement Guides: What People Are Asking.That review gating — soliciting only patients likely to praise you, or routing unhappy ones away — is deceptive under FTC endorsement policy..

The practical translation for a solo practice:

• Ask everyone or no one. You may invite patients to leave a review; you may not filter the invitation to only the ones likely to praise you.
• Never write, buy, or trade for reviews. Not your own, not a colleague's, not in exchange for a discount or a gift.
• Do not gate. A 'tell us privately if you're unhappy, publicly if you're happy' funnel is the exact pattern the endorsement guidance describes 2Ref 2Federal Trade Commission (2023).FTC's Endorsement Guides: What People Are Asking.That review gating — soliciting only patients likely to praise you, or routing unhappy ones away — is deceptive under FTC endorsement policy..
• Leave honest negatives up. Suppressing them is what the 2024 rule reaches 1Ref 1Federal Trade Commission (2024).Federal Trade Commission Announces Final Rule Banning Fake Reviews and Testimonials.The FTC's 2024 final rule banning fake, purchased, and suppressed reviews — the outer bound on soliciting and managing Google reviews..

The upside of playing it straight: genuine reviews accumulated slowly are what the map ranks and what a referrer trusts.

Responding to a review without breaching HIPAA

The single most dangerous button on the profile is 'reply.' A public response that confirms the reviewer was your patient — even a warm 'it was a pleasure treating you' — discloses protected health information, because acknowledging the treatment relationship is itself PHI. HIPAA's rules on using patient information mean a public reply may never confirm care, name a condition, or dispute clinical details 3Ref 3HHS Office for Civil Rights (2026).Marketing.That using patient information for marketing requires authorization, with a narrow face-to-face exception — the frame for review replies and review requests..

A reply skeleton that stays safe:

• Thank the reviewer in general terms without confirming they are a patient: 'Thank you for taking the time to share feedback.'
• Never acknowledge the treatment relationship or reference anything specific to a visit.
• Move specifics offline by inviting the person to contact the office directly so any concern can be addressed privately.
• For a negative review, resist the urge to defend. A public rebuttal that references the encounter breaches HIPAA even when the review was unfair.

When a review is defamatory or fabricated, the remedy is Google's flag-for-removal process and, if needed, counsel — not a public reply that leaks PHI to make your point.

Asking for reviews the compliant way

Ask for reviews in the channel HIPAA already blesses: face-to-face. A direct, in-person or end-of-session invitation to leave honest feedback falls inside HIPAA's face-to-face exception and needs no separate authorization 3Ref 3HHS Office for Civil Rights (2026).Marketing.That using patient information for marketing requires authorization, with a narrow face-to-face exception — the frame for review replies and review requests.. A neutral written card or a link on a checkout page works the same way, as long as it goes to everyone and asks for honest — not positive — reviews.

Automated messaging is where practices trip. If you text patients a review request through an automated system, the TCPA requires prior express consent before an autodialed or prerecorded message reaches them 4Ref 4Federal Communications Commission (2026).Telemarketing and robocalls.That the TCPA requires prior express consent before automated texts, including automated review requests, reach a patient.. Capture that consent at intake, log it, and honor opt-outs the moment they arrive.

A review-management vendor is a business associate. If you hire a service that receives patient names, phone numbers, or emails to send review requests on your behalf, that vendor handles PHI for you and needs a signed business associate agreement before you send it a single contact 5Ref 5HHS Office for Civil Rights (2026).Business Associates.That a review-management vendor receiving patient contact information is a business associate requiring a signed BAA.. And never offer anything of value for a positive review — that collides with both the endorsement guidance and the fake-review rule.

Accuracy, accessibility, and the website you link

A profile is not a set-and-forget asset; Google and the public can both edit it. Keep hours and holiday hours current, because wrong hours are the fastest way to lose a first-time caller. Use Posts for genuine updates and refresh photos periodically. Watch the 'suggested edits' and duplicate-listing notifications — anyone can propose a change to your hours or category, and a merged duplicate can quietly resurface.

The website you link from the profile is part of your public accommodation. The Department of Justice treats a private health care office as an ADA Title III public accommodation and points to web-accessibility expectations for the online front door patients reach through your listing 6Ref 6U.S. Department of Justice (2026).The Americans with Disabilities Act.That a private health office is an ADA Title III public accommodation, extending web-accessibility expectations to the website linked from the profile.. A site a screen-reader user cannot navigate is both an access problem and a lost patient.

Think of the profile as one node in a connected presence. It should point to a clean website, and it should agree with the other places you appear — the expert quote a reporter runs beside your name, and the visibility that helps you earn referral flow without buying it.

Two tools inside the profile reward light, regular use. Google Posts let you publish short, timely updates — a new service, a change in availability — that surface on the profile for a limited window, so a profile that posts occasionally reads as active. The questions-and-answers section is public and anyone can answer, so monitor it and post accurate answers yourself before someone else guesses; treat it as part of the profile you maintain, not a comment thread you ignore.

A monthly maintenance rhythm

Reserve a short block each month to keep the profile healthy, and it will keep working for you between visits. Nothing here takes long, but a profile decays quietly — hours drift, a duplicate resurfaces, reviews pile up unanswered — so a fixed monthly pass is what keeps a strong listing strong. The rhythm is small and repeatable:

• Check for suggested edits and duplicates and correct or report anything Google or the public changed.
• Respond to new reviews within a few days, using the HIPAA-safe skeleton — thank generally, never confirm care.
• Confirm hours, and set holiday hours ahead of closures.
• Add one Post and refresh a photo so the profile looks tended, which both patients and the ranking notice.
• Re-check NAP consistency against your website and other listings after any change.

Being easy to find on the map is one half of being chosen; the other half is being referrable, so that the clinician down the street and the patient searching at nine at night land on the same, accurate picture of your practice.