Skip to content

Your Clinic Website Can't Use Testimonials. Here's What Works Instead

Most Ontario health colleges prohibit testimonials in a practitioner's advertising, and a website is advertising. What the rule covers, and what to do instead.

Tom Boban · September 4, 2026 · 6 min read

Updated September 21, 2026

On this page

There's a moment that happens in about half of our first conversations with a clinic. We're looking at the site their last agency built, there's a testimonials slider on the home page with five happy patients in it, and we ask whether their college has seen it. Usually there's a pause.

Ontario regulates health professions under one act, and each profession's college sets an advertising standard under it. Several of those colleges, including the ones governing physicians, dentists and physiotherapists, prohibit testimonials in a member's advertising outright. All of them require that anything a practitioner says about their services be accurate and verifiable, and none of them treat a website as anything other than advertising.

The slider is a complaint waiting for a competitor to file it, and the agency that built it had no idea, because on a plumber's site the same slider is the best thing on the page.

What the rule covers

The standards differ between colleges, and you should read your own rather than take this article's word for it. But the shape is consistent.

Advertising means anything the practice puts out to attract patients: the website, a Google Ad, an Instagram account, a flyer in the lobby. A testimonial means a patient's account of their experience, presented by the practice. Quoting a Google review on your home page is a testimonial. Embedding a review widget that pulls them in automatically is a testimonial. A video of a patient saying you fixed their back is a testimonial with a face on it.

What the rules generally don't cover is what patients say in places you don't control. A review left on your Google Business Profile is the patient's speech on Google's platform. Most colleges have said a member isn't responsible for third-party review sites, provided they didn't solicit the review in a way the standard forbids, didn't pay for it, and didn't republish it.

That distinction is most of the design brief for a clinic site: reviews live on Google, the site points at them, and it doesn't quote them.

What a patient is checking instead

The constraint hurts less than it sounds, because testimonials weren't doing the work you thought they were.

A patient choosing a clinic on their phone is running three checks, usually in under two minutes, and none of them is "do strangers like this place." That question is answered on Google before they ever reach your site.

Am I eligible?direct billing, WSIB, MVACan I get in?next available slot, in textIs this real?registration, college, the roomall three clearBookone tap awayTestimonials on the siteprohibited by most collegesleave them where they're allowedYour Google profilereviews live here; the site links to it
The three questions a patient is actually answering on a clinic site, and the one thing that used to be on the home page. Reviews still count, for the map pack and for what an assistant says. They count from the profile, and the site links out to them.

Eligibility comes first. Do you bill their insurer directly. Do you take WSIB claims, or motor vehicle accident claims. Are you accepting new patients. A site that doesn't state these in plain text, on the page they landed on, loses the patient to one that does, and the query they typed almost certainly included one of those words.

Then whether they can get in this week. A booking link that shows the next open slot is the single most persuasive element a clinic site can carry, and it's one the regulator has no opinion about.

And then whether you're real: is the practitioner registered, and trained in the thing they need. A provider page with the registration number, the college, the training and the clinical focus, written in sentences rather than a string of letters, does more for trust than any quote could, and it's the content Google's own quality guidance looks for on health pages.

What to build instead

Start with a page per service and condition. Physiotherapy for a shoulder injury and pelvic health physiotherapy are different searches by different people, and a single "Services" page with both as bullet points ranks for neither. Each page says who it's for, what the first visit involves, how long it takes, and what it costs before and after insurance.

Provider pages next, one per practitioner, with the credentials above and a photo of the person taken in the actual clinic rather than a studio. The photo matters more than it should; patients check it against whoever walks in.

The eligibility block goes above the fold on every service page, written as plain statements: direct billing, the insurers you work with most, WSIB, MVA, extended health, whether you're taking new patients. Photos of the rooms belong somewhere too, the treatment room, the gym space, the front desk, because a patient about to hand over their body wants to see where that happens.

Reviews go in the one form that's allowed, which is a link to your Google Business Profile and a sentence saying that's where patients leave them. The count can stay on the profile. The words can't come across.

Reviews still matter. They just live somewhere else

Reviews still count, a lot. For the map pack, and increasingly for what an AI assistant says when someone asks it for a physio nearby, review volume on your Google profile is one of the two or three inputs that decide it. The method we use to check that shows it clearly: the assistant reads the profile and the third-party pages first, and your website mostly to confirm a fact.

So keep asking for them, in whatever way your college allows, which for most is a plain request at the end of a visit and nothing in exchange. Reply to each one on the profile, and leave them there.

The form nobody thinks about

The intake form comes up on nearly every clinic site we inherit, so it gets its own section.

A form that asks for the patient's condition, medication, or history is collecting personal health information, and that puts the clinic under Ontario's health privacy law for wherever that form's submissions end up. On most templated sites, they end up in a third-party form tool the agency picked for convenience, hosted who knows where, with a login the clinic doesn't hold.

The fix is to collect less. Name, contact, what they're coming in for in a word, preferred time. Health details wait for the clinic's own intake system, which was built for them. Fewer fields also finishes more forms, which is the outcome you wanted anyway.


We build for clinics with the standard open, which is a strange thing to have to say and a real difference from a general agency. The sector page for healthcare and clinics covers the rest of what changes, and if you'd like us to read your current site against your college's standard, that's a twenty-minute call and costs nothing.

Frequently asked

Can a physiotherapy or medical clinic in Ontario put patient testimonials on its website?

For most regulated health professions, no. Ontario's health colleges each set an advertising standard, and several of them, including those governing physicians, dentists and physiotherapists, prohibit testimonials in a member's advertising outright. A website counts as advertising. Quoting a Google review on your home page, embedding a review widget, or posting a patient video are all testimonials under that reading. Read your own college's standard rather than relying on a general summary.

Are Google reviews allowed for clinics in Ontario?

Generally, reviews patients leave on your Google Business Profile are treated as the patient's speech on a third-party platform, and most colleges have said a member isn't responsible for them, provided the review wasn't solicited in a way the standard forbids, wasn't paid for, and wasn't republished by the practice. So the working design is: reviews live on Google, the website links to the profile and says that's where patients leave them, and it doesn't quote them.

What should a clinic website include instead of testimonials?

The things a patient is actually checking on their phone. Eligibility first: whether you bill their insurer directly, take WSIB or motor vehicle accident claims, and are accepting new patients, stated in plain text above the fold. Then availability, ideally a booking link that shows the next open slot. Then whether you're real: a provider page per practitioner with registration number, college, training and clinical focus, written in sentences. Plus a page per service and condition rather than one Services list.

Can my clinic website say we're specialists?

Be careful with that word. "Specialist" can be a protected title, and a physiotherapist who isn't a rostered specialist can't call themselves one. A clinic page that says "specialists in sports injury" has made the claim on the practitioner's behalf. Templates use the word freely because in other industries it's harmless. Read every heading your agency wrote with your college's standard open beside it, and describe your clinical focus in plain words instead.

Is our website intake form a health privacy problem?

It can be. A form asking for a patient's condition, medication or history is collecting personal health information, which puts the clinic under Ontario's health privacy law for wherever those submissions end up. On many templated sites that's a third-party form tool the agency chose, hosted who knows where, with a login the clinic doesn't hold. Collect less: name, contact, what they're coming in for in a word, and preferred time. Health details wait for the clinic's own intake system.

Sources

  1. Regulated Health Professions Act, 1991, Government of Ontario
  2. Personal Health Information Protection Act, 2004, Government of Ontario
  3. College of Physicians and Surgeons of Ontario, CPSO
  4. College of Physiotherapists of Ontario, College of Physiotherapists of Ontario
  5. Creating helpful, reliable, people-first content, Google Search Central

Want this done properly on your site?