PRACTICE DECISION TOOLS
FOR Doctors, Specialists, NPs, PAs
Physician-Patient Archetype Test • Marketing • CMT Patient Study • See all tools
RESEARCH & PROOF
National Stats, Industry Research
CMT Research Briefs • Polls • Visuals • Legal Op • Natl Stats • Contact
Story Beats Specs: Testimonials, Patient Stories and the Rules
Patients don't remember your service list. They remember a story about someone like them. Stories are your most persuasive marketing, and in healthcare they come with rules from both the FTC and HIPAA. Here is how to tell them well and safely.
Start here: the questions this brief answers
Tap a question for the short answer, then jump to the evidence.
Specs inform; stories persuade. When CMT advises physicians on media interviews and marketing, the message is the same: your patients are the story, not your business model. But patient stories carry rules. The FTC says a testimonial describing results will usually be read as what others can expect, and "results may vary" doesn't fix that; you need proof the results are typical or a clear disclosure of generally expected results. Employees and anyone given something of value must disclose the connection. Under HIPAA, using a patient's information to market your practice generally requires the patient's written authorization. Collect stories about the experience, get written permission, avoid outcome promises and never pay for praise.
“Don't make your marketing about your business model. Nobody cares about the model. They care about the mom who got a call back from her doctor on a Saturday. Your patients are the story. Celebrate them, with their permission.”
Can I share patient testimonials?
Generally yes, with the patient's written HIPAA authorization and within FTC rules. Ask your compliance adviser for an authorization form.
Go to the full answer ↓Is "results may vary" enough?
No. The FTC says that disclaimer doesn't change how consumers read a results testimonial. You need evidence the results are typical or a clear statement of generally expected results.
Go to the full answer ↓Can staff or friends give testimonials?
Only with clear disclosure of the relationship. The FTC says employees should disclose their employment when endorsing.
Go to the full answer ↓What kind of story is safest and strongest?
A story about the experience, such as being called back the same day or having a doctor at the hospital, rather than a promise of clinical results.
Go to the full answer ↓Nobody remembers your service list
Same-day visits. Extended appointments. Direct cell phone access. Annual wellness plan. Every membership practice website has the same list.
Now compare: “My doctor called me back at 9 p.m. on a Saturday, and then showed up at the hospital the next morning.”
That’s the one people repeat.
In Branded, Michael Tetreault’s advice to physicians speaking with reporters applies to all marketing: don’t make it about you or your business model. “…your patients are the story! Celebrate them and the rest of the conversation will lead to better dialogue.” Share brief stories that show how you improve patients’ lives, and know them before the interview.1
Specs inform. Stories persuade.
What the FTC says about testimonials
The FTC’s Endorsement Guides apply to testimonials in advertising, including on websites and social media. Three points matter most for a practice.2 Policy and Law
Results testimonials imply typical results
A testimonial with specific results “usually will be interpreted to mean that the endorser’s experience reflects what others can also expect.” Disclaimers like “Individual results may vary” don’t change that. You need proof the results are typical, or a clear disclosure of generally expected results.
Disclose connections
Disclose connections consumers wouldn’t expect, such as payment or something of value. Employees “should disclose your employment relationship when making an endorsement.”
Claims need proof
Advertisers are responsible for substantiating objective claims made in testimonials, including health claims.
No cherry-picking reviews
The 2023 revisions treat showing only favorable reviews, or “review gating,” as potentially deceptive when it makes posted reviews substantially more positive.
Sources: FTC business guidance (2015) and a law firm summary of the 2023 revised Guides.2,
HIPAA: get it in writing
HHS defines marketing under HIPAA as “a communication about a product or service that encourages recipients of the communication” to purchase or use it, and the Privacy Rule requires “an individual’s written authorization before a use or disclosure” of protected health information for marketing, with limited exceptions.4 Policy and Law
CMT’s practical read: before you use a patient’s name, photo, story or quote to promote your practice, get a signed HIPAA authorization that your compliance adviser has approved. Remember that two dental practices have paid HIPAA settlements over patient details shared in replies to online reviews (Brief No. 70).5
This is a general summary, not legal advice. Authorization requirements, state privacy laws and medical board advertising rules vary. Have counsel approve your authorization form and testimonial process.
How to collect a story the right way
Listen for experience stories
The callback, the hospital visit, the time the team noticed something nobody asked about. Experience stories are stronger and carry fewer claim risks than outcome stories.
Ask, don't pressure
"Would you be willing to let us share that story?" Nothing of value in exchange.
Get written authorization
Use your approved HIPAA authorization. Let the patient review the final words and photo.
Write it simply
The patient is the hero with a problem; your team is the guide; the ending is what changed for them.
Check the claims
Remove anything that promises clinical results unless you have proof they're typical.
CMT original process informed by FTC and HHS guidance.2,
Michael Tetreault has watched a concierge physician on video turn a media interview into a complaint about how hard it is to be a doctor today. True, he writes, but it is “akin to feeding the animals at the zoo.” The audience wanted to know how the doctor would help them. Lead with the patient’s story, and the rest of the conversation follows.
From Branded (2025).1
Build a story bank
- Ask your team to share one patient experience story from the past month in your next huddle.
- Send your compliance adviser a draft testimonial authorization form.
- Review your website for any testimonial that promises results.
Stories travel best in your own community. Plan where and how you'll share them.
Free. No sign-up. Your answers stay in your browser. Step 3 of CMT's Learn, Build, Lead tools. It helps you pick the patient segments that fit your practice, find where they are, plan conversations with local physicians, check that your message sounds like care rather than a pitch, and leave with a 90-day plan.
This brief is educational and is not legal advice. FTC rules, HIPAA, state privacy laws and medical board rules all may apply to patient testimonials. Consult a qualified healthcare attorney.
Stories persuade
Patients repeat stories, not specs.
Follow the rules
Typical results, disclosed connections, written authorization.
Patients are the story
Celebrate them, with permission.
How this brief was built
This brief draws on Federal Trade Commission business guidance on the Endorsement Guides, a law firm summary of the FTC's 2023 revisions, HHS Office for Civil Rights guidance on HIPAA and marketing, and CMT's Branded (2025), including its advice on media and storytelling. Legal summaries are general and are not legal advice. State medical board advertising rules, which vary, are not covered.
How to read the evidence types
Every key finding is labeled by evidence type. Labels describe the type of evidence, not its value. Each type answers different questions. Funding is disclosed on every source.
Randomized trials and systematic reviews.Best for cause and effect.
Large observational studies and government data.Best for trends at scale.
Surveys, smaller studies and expert consensus.Best for real-world experience.
Company-sponsored or company-reported data that is not peer-reviewed.Best for early signals and operating data.
Statutes, regulation and official guidance.Best for what is required.
What we don't know
- How state medical boards in your state treat testimonials in physician advertising; some states have specific rules.
- Whether experience-focused stories outperform outcome-focused stories for membership practices; no study was found.
How to cite this brief
External review: this brief has not yet been reviewed by an outside expert. When review is complete, the reviewer is credited by name above with any conflicts of interest, and the version number is updated. Reviewers check accuracy and fairness; CMT is responsible for the final content.
Corrections policy: when an error is identified, CMT corrects it in the open and updates the version number above. Send corrections to the editor through conciergemedicinetoday.net.
Related CMT Research Briefs
References
- Tetreault M. Branded: The Concierge Medicine Doctor. Softcover edition. Concierge Medicine Today, LLC; 2025. Includes CMT online polls the publisher describes as not scientific.Funding: Concierge Medicine Today (self-published; no outside funder) CMT original
- Federal Trade Commission. The FTC's Endorsement Guides: What People Are Asking (business guidance). May 2015; Endorsement Guides revised in 2023. www.ftc.govFunding: federal (Federal Trade Commission publication)
- Venable LLP. FTC finalizes updated endorsement and testimonial guides. July 2023. www.venable.comFunding: not stated (law firm analysis)
- U.S. Department of Health and Human Services, Office for Civil Rights. HIPAA Privacy Rule guidance: Marketing. Guidance dated 2002, revised 2003; last reviewed 2013. www.hhs.govFunding: federal (U.S. Department of Health and Human Services publication)
- U.S. Department of Health and Human Services, Office for Civil Rights. Resolution agreement: B. Brandon Au, DDS, Inc., doing business as New Vision Dental ($23,000; disclosures of patient information in responses to online reviews). December 14, 2022. www.hhs.govFunding: federal (U.S. Department of Health and Human Services publication)
Educational and informational only. This CMT Research Brief does not constitute medical, legal, tax, financial, accounting or other professional advice, and it does not create a professional relationship of any kind. Statements about laws, regulations, tax rules and payer policies are general, may not reflect the rules in your state, and can change after publication. Consult a qualified attorney, accountant, tax adviser, compliance professional or licensed clinician before acting on anything here.
Independence. Concierge Medicine Today is an independent publication. It does not accept payment for favorable coverage, and it does not favor one practice model over another. Company names and products are mentioned for context only and are not endorsements. Funding is disclosed for every source in the reference list.
Accuracy. CMT verifies figures against their original or best available sources at the time of publication. Where a figure is an estimate, an inference or a company-reported number, the brief says so. This content is not without possible error or omission.
© 2007-2026 Concierge Medicine Today, LLC. All rights reserved.