How to Ask Med Spa Clients for Reviews
A practical, HIPAA-aware playbook for asking aesthetic clients for reviews at the right moment, with scripts and automation that keep patient details private.
In short
Reviews are the deciding factor for most people choosing an aesthetic provider, yet med spas rarely ask well. This guide covers why reviews drive bookings, the best moment to ask, SMS and email scripts that avoid protected health information, how to automate requests after appointments, and how to stay HIPAA-aware while responding, handling negatives, and using before-and-after context without gating or paying for feedback.
Key takeaways
- Ask at the peak — right after a client sees or feels a great result, not weeks later
- Send a direct one-tap Google review link by SMS and email, never a vague ask
- Keep every request free of protected health information and get consent to text first
- Route unhappy clients to a private form before they reach a public star rating
- Never gate reviews or trade discounts for stars — respond to every review instead
Some links to tools we rate — including HighLevel — are affiliate links. If you start a trial through them we may earn a commission, at no extra cost to you. We only recommend tools we would set up for our own clients.
Ask for a review at the moment a client is happiest — right after they see or feel a great result — and send them a direct, one-tap link by text and email. That single habit, done consistently and without any protected health information in the message, is what turns satisfied med spa clients into a steady stream of public reviews. Below is exactly how to do it in a way that respects HIPAA, keeps you inside platform rules, and still fills your review page.
Why do med spa reviews drive bookings?
Aesthetic treatments are personal, expensive, and permanent enough that nobody books on impulse. Before a prospect calls, they read. They want proof that other people like them got safe, natural, consistent results from your team. Recent, specific med spa reviews answer the two questions every prospect has: is this safe, and will I be happy? A clinic with fresh reviews every week reads as busy and trusted. A clinic with six reviews from two years ago reads as a gamble. Volume matters, but recency matters more — a review from last week does more work than ten from 2023.
Reviews also feed the map. Google weighs review count, rating, and recency when it decides which clinics to show in local results, so a consistent asking habit quietly improves your visibility at the same time it builds trust. There is a compounding effect here too: the more reviews you gather, the higher you rank, the more prospects see you, and the more of them convert into the clients you will ask for the next round of reviews. The clinics that win locally are rarely the ones with the best treatments — they are the ones with the most visible proof. If you want the full system behind that, see our reputation-management setup guide.
When is the best moment to ask?
The best moment is the peak of the client's happiness, and that peak depends on the treatment.
For treatments where the result is immediate or the client leaves glowing — a facial, a great consultation, a smooth injectable visit — ask the same day, ideally within a few hours while the experience is fresh. For treatments with a settling period, wait until the outcome is visible and ask at the follow-up touchpoint. Asking too early, before results show, gets you silence or a lukewarm rating. Asking weeks later, after the glow fades, gets you ignored.
The reception experience matters as much as the clinical one. A client who felt welcomed, unhurried, and cared for is far more likely to write something warm than one who was rushed. So the "peak" you are aiming for is emotional as much as physical — the moment they feel genuinely looked after. Train your front desk to recognize a delighted client and hand off that signal, whether by a quick note in the record or a simple tag that triggers the ask.
Here is a simple way to match timing, channel, and message angle:
| Timing | Channel | Message angle |
|---|---|---|
| Same day, a few hours after visit | SMS | "Loved having you today" plus direct link |
| Next morning after visit | Warm thank-you, one-tap review button | |
| At the follow-up, once results show | SMS | "So glad you are happy with how things turned out" |
| Longer-term happy client | "Would you share your experience?" |
How should I actually ask — text or email?
Use both, in that order. SMS is opened and tapped fastest, which is why it wins for the same-day ask. Email is the gentle backup a day or two later for anyone who did not tap. The golden rule for both: one tap. Include a direct link that opens your Google review box, not your homepage and not a "search for us" instruction. Every extra step loses people.
Keep the message short, warm, and completely free of any treatment detail. Here are sample messages you can adapt — note that all specifics are shown in [square brackets] as placeholders you fill in, and none of them name a treatment or condition:
Sample SMS, same day:
[Hi FIRST NAME, it was lovely seeing you at CLINIC NAME today. If you have a moment, we would be grateful for a quick review here: REVIEW LINK. Thank you! Reply STOP to opt out.]
Sample SMS, at follow-up:
[Hi FIRST NAME, so glad you are happy with how everything turned out. A short review would mean a lot to our team: REVIEW LINK]
Sample email, next day:
[Subject: Thank you from CLINIC NAME. Hi FIRST NAME, thank you for trusting us with your visit. If you enjoyed your experience, would you share a few words here? REVIEW LINK. It helps other people find us and takes about a minute.]
Notice what is missing: no treatment name, no photos, no health details. That is deliberate.
How do I stay HIPAA-aware while asking?
Asking for a review is fine. The risk lives in the details. A message that says "hope you love your [treatment] results" quietly reveals why someone came to you, and that is protected health information sitting in an SMS thread. Keep every request generic — a friendly thank-you, a one-line ask, a link.
Two more essentials. First, get consent to text before you send marketing or review messages, and honor opt-outs immediately. Include a clear opt-out line in your SMS, and make sure a STOP reply actually stops future sends without anyone on your team having to remember. Second, keep photos out of it entirely. Before-and-after images can be protected health information, so they belong in a separate, clearly consented process — never attached to or referenced in a review request. Your intake stage is the right place to capture texting consent cleanly; our med spa intake form templates show how to build that in.
When in doubt, apply a simple test before any message goes out: if a stranger read this text, could they tell why the person visited a med spa? If the answer is yes, strip it back until the answer is no. A warm, generic thank-you with a link passes every time, and it still earns the review.
How do I handle unhappy clients?
Give every client an easy private path before they reach a public star box. A short "how did we do?" message that routes a happy response to your Google link and an unhappy one to a private feedback form lets you catch problems and fix them fast. This is not gating — you are not blocking anyone from posting publicly, and everyone still has the same route to a public review if they want it. You are simply offering a private channel first so a fixable issue becomes a conversation, not a one-star post.
When a negative public review does appear, respond calmly and never confirm the person was a patient or mention any treatment detail. A short, gracious reply inviting them to contact the clinic directly protects their privacy and shows future readers you handle concerns with care. Remember that most people reading a bad review are not judging the complaint — they are judging how you responded to it. A defensive or clinical reply does more damage than the original review; a composed, human one often earns trust from the very readers you worried about.
What should I never do?
Never gate reviews by sending only happy clients to public sites — platforms prohibit it. Never trade discounts, credits, or free products for reviews; that violates Google's terms and can get your reviews filtered. And never respond to a negative review with defensiveness or private health details. Ask honestly, respond to everything, and let your work earn the stars.
How do I automate this after every appointment?
Doing this by hand works for a week, then gets forgotten. Automation is what makes it consistent. Connect your booking or point-of-sale system to a tool that fires a templated message once an appointment is marked complete, with a short delay and a direct review link — and set it to skip anyone who has not consented to texts.
HighLevel is one option that does this well: it can auto-text and email clients after a visit, and route unhappy responses to a private feedback form before they reach a public rating. Honestly, the value is in the automation being reliable and consistent, not in it being the cheapest tool on the market — a review that actually gets sent beats a fancier system that sits idle. If that fits your clinic, you can start a free HighLevel trial and wire up your after-visit flow.
Whatever tool you use, the same habits that earn reviews also bring quiet clients back — see our win-back campaign ideas for med spas for that side of the loop, and browse more in the Med Spa & Aesthetics Marketing hub.
Where to start
Pick your best-loved treatment, write one warm SMS with a direct link, and turn on an after-visit trigger for it this week. Watch the reviews arrive, then expand. If you would rather have it built for you, check our pricing or book a call and we will set up a HIPAA-aware review engine end to end.
Related reading: How to Get More Reviews for Med Spas.
Frequently asked questions
Why do med spa reviews matter so much for bookings?
When is the best time to ask a med spa client for a review?
Should I ask for reviews by text or email?
Is asking for reviews a HIPAA problem?
Can I offer a discount or free product for a review?
What is review gating and why should I avoid it?
How do I handle an unhappy client without a bad public review?
Can I mention before-and-after photos in a review request?
How many reviews does a med spa need?
Should I respond to every review?
How do I automate review requests after appointments?
What should I never include in a review request message?
About the author

Founder, GHL Spark
Farhad is the founder of GHL Spark, where he builds and white-labels GoHighLevel SaaS platforms for agencies and SaaS operators. He writes about the parts of GoHighLevel that actually break in production — A2P registration, onboarding, support load and automation.
More from Farhad