Strategic Reference · DoctorsInternet.com

Google Business Profile Playbook 2026

Services architecture, image policy, service areas, and no-address practice setups — for dental, medical, mental health and nutrition clients. Every claim is labeled by evidence strength. Where the industry repeats something that isn't true, it's flagged as a myth.

Compiled August 10, 2026 Primary sources: Google Help & Developer docs, Sterling Sky, Whitespark, BrightLocal, HHS/OCR, FTC, ADA

§0 Evidence Key

Local SEO is drowning in confidently-stated nonsense. Every material claim below carries one of these labels. Never present an amber or red claim to a client as fact.

LabelMeaningHow to use it with clients
OfficialDocumented by Google, a regulator, or a courtState as fact. Cite the URL.
TestedPublished controlled or tracked test (Sterling Sky, Whitespark, Local Falcon)State as evidence-backed. Name the study.
SurveyPractitioner survey / consumer survey (Whitespark LSRF, BrightLocal LCRS)"Expert consensus" or "consumer research" — not a controlled test.
AnecdotalForum reports, agency observation, single caseFrame as "reported" / "we've seen." Never as fact.
MythWidely repeated, actively disproven or unfindable at sourceStop selling it. Remove from decks and SOPs.

§1 Executive Summary — The Ten Things That Matter

If you read nothing else, read this. Ordered by revenue impact across a healthcare book of business.

  1. Primary category is the #1 ranking lever, full stop. Whitespark's 2026 survey of 47 local SEO experts scores it 227 — ahead of proximity (225) and business title keywords (223). For a general dentist that's Dentist in ~99% of cases. Survey
  2. Predefined services jumped from #81 to #22 in the ranking factors. This is the biggest riser in the study, and it's the section you asked about. Ticking Google's predefined services matters; custom services matter less; service descriptions rank #124 and are a conversion play only. Survey Tested
  3. Service areas do not affect rankings. At all. Four independent tests, two firms, including one that publicly retracted the opposite conclusion. What moves geographic reach is the verified address, whether the address is shown, and map pin accuracy. Tested
  4. Never hide a dental office address. "Address showing on GBP" is a top-10 ranking factor (score 176). Sterling Sky documented a local pack disappearing entirely when an address was hidden, and returning when restored. Tested
  5. Stock photos are a policy violation, not merely bad practice — Google's Maps content policy explicitly bans "stock photos" and "imagery created by other parties." No documented suspensions for it alone, but they also don't help you. Official
  6. Telehealth-only practices are not eligible for a GBP. "A business must make in-person contact with customers during its stated hours." No healthcare carve-out exists. Virtual offices are explicitly ineligible. Official
  7. Responding to patient reviews is a live HIPAA enforcement area, and dentists are the main target. Four OCR actions ($10K–$50K); three of them dental. Even confirming someone was a patient is a disclosure. Official
  8. 4.5 stars is now a hard operational floor. 31% of consumers won't use a business below it (up from 17% last year), and it's also roughly where ChatGPT's recommendation threshold sits. Survey
  9. Yelp now feeds ChatGPT. As of July 2026 Yelp licenses reviews, ratings and photos to OpenAI. If you deprioritized Yelp for healthcare clients, that decision is now wrong. Official
  10. GBP impressions are down roughly 54% year over year while actions held flat. AI Local Packs show fewer businesses and often strip the click-to-call button. Reporting must shift from impressions to actions, or every QBR looks like a failure. Survey Tested

§2 Services — Architecture, Limits, and the Duplicate Problem

Your original question. "Edit profile → Services" and the standalone "Edit services" panel write to the same underlying array. There is one list, rendered in category-scoped blocks.

2.1 Why you see the same service multiple times

Every service item is bound to a category ID. The editor renders one block per category on the profile — primary plus every secondary. Google auto-suggests overlapping services under each. Add five dental categories and "Teeth Whitening" can legitimately exist five times as five distinct objects.

Service typeAPI objectBound toRanking weight
Predefined (structured)structuredServiceItem + serviceTypeIdA category that officially supports itHighest. LSRF #22 (score 134)
Custom (free-form)freeFormServiceItem + categoryId + labelWhatever category you assignLower. Titles #30 (122), presence #48 (106)
Service descriptionsdescription field, 300 charsThe parent serviceNear-zero. LSRF #124 (score 69)

Three amplifiers of the duplicate problem

  • Category sprawl. Each secondary category adds a whole new suggested-service grid. This is the #1 cause. Anecdotal
  • Structured + custom collision. Tick Google's "Teeth Whitening" and type "Professional Teeth Whitening" — two objects, no dedupe. (Google does block exact duplicate custom services with a "you already have this service" error.) Anecdotal
  • Third-party sync tools. Google's API states plainly: "Updating individual services is not supported." A patch replaces the entire array. A stale sync silently wipes or re-stacks everything. There is a documented case of Moz sync stripping every service description from a profile. Official Anecdotal

2.2 Hard facts and limits

QuestionAnswerEvidence
Maximum number of services?No documented cap. Google publishes none, in Help or the API. Practitioners report ticking 50+ predefined services without issue. The real constraint is manageability and rejection rate.Official (absence) + Anecdotal
Service description limit300 characters. Confirmed in both v1 and v4 API references. Reduced from 1,000 at some point on or before April 2020 — Google never announced it.Official
Legacy long descriptionsGrandfathered. Old 1,000-char descriptions survive until edited, then snap to 300. Do not casually re-save an old client's services.Anecdotal
Custom service name limitAPI says 140 characters recommended; a conflicting field spec suggests 250. The widely-cited "58 characters" is a vendor blog claim contradicting Google's own docs. Test in the UI before publishing a client-facing spec.Official (ambiguous)
Can you reorder or dedupe?No native control. The only ordering lever is reordering your categories. Auto-populated services must be deleted manually.Anecdotal
Rate limit10 edits per minute per profile, non-increasable. Matters for bulk pushes across a DSO.Official
Do services affect ranking?Yes — predefined ones. Sterling Sky's 2019 test found no effect; their 2022 retest found gains within 24–72 hours, on both explicit and implicit keywords. Verticals tested included dermatology ("vampire facial").Tested (observational, no control group)

Honest caveat on the ranking claim

Every "services affect ranking" citation in the industry traces back to a single observational retest by Sterling Sky. Search Engine Land and Whitespark's survey both cite it rather than independently replicating. High practitioner consensus, low methodological rigor. Sell it as "strong directional evidence," not "proven."

2.3 Two things almost nobody knows

Google adds services you never added. It pulls from third-party sites and social profiles, and will re-add a service you deleted if the external source persists. Services can also differ between logged-in and incognito views. Service auditing is a recurring retainer task, not a one-time setup.

Services now feed review attribution. A 2026 beta asks reviewers "Which services did you get? (Select all that apply)" — populated from every predefined service in your category, not just the ones you ticked. You cannot control the list.

2.4 The rebuild procedure

  1. Lock categories first. Never touch services before categories are final. Every category you delete removes a duplicate service grid.
  2. Kill or fix any sync tool that writes serviceItems. Otherwise it re-pushes duplicates within a day.
  3. Wipe and rebuild. There is no dedupe function. Delete everything, rebuild clean.
  4. One service, one home. Each real service gets exactly one entry, under its single most relevant category. Prefer Google's predefined item; go custom only when no predefined match exists.
  5. Watch the justification text. Custom services render verbatim next to the practice name as "Provides: X" in the local pack. Clumsy wording is a public reputation problem. Sterling Sky documented law firms rendering as "aggravated and sexual assault."
  6. Descriptions last. 300 characters, answer-first, entity-rich. Ranking value ≈ zero; conversion and AI-citation value is real.
  7. Mirror to the site. GBP service name → on-site H1 → hasOfferCatalog schema. Exact string match. Entity consistency is the real GEO lever.
  8. Re-audit every 30 days. Screenshot the list; Google changes it silently.

Unexploited opportunity: build the predefined services catalog yourself

Google does not publish predefined service lists, and no credible third party has published the dental/medical ones. Every "dental services list" you'll find online is somebody's recommendation, not Google's catalog. You can pull the real one:

GET .../v1/categories:batchGet?regionCode=US&languageCode=en&names=gcid:dentist&view=FULL

view=FULL is what returns serviceTypes[] with real IDs and display names. Without it you get nothing. Run this across every gcid in your book — dentist, cosmetic_dentist, orthodontist, dermatologist, plastic_surgeon, psychologist, nutritionist — and you have an internal asset that does not exist publicly. Free alternatives if you don't want to wire up OAuth: the Jepto Profile Discovery tool, or the "Add more services" picker on a live profile.

2.5 Services: do / don't

Do

  • Tick every relevant predefined service — they carry the weight
  • Use custom services for genuine long-tail variants you actually offer (kids dentist, children's dentist, TMJ dentist)
  • Put pricing in the price field, never the name
  • Write descriptions answer-first for AI citation and justification text
  • Audit monthly — Google adds and removes silently

Don't

  • List services the practice doesn't actually provide
  • Duplicate the same service across multiple category blocks
  • Put prices, phone numbers, or profanity in a service name — auto-rejected
  • Stack dozens of near-identical keyword variants; rejection risk rises, ranking gain doesn't
  • Re-save a legacy long description without knowing it will truncate to 300
  • Let a listings-sync vendor own serviceItems unattended

§3 Images — Specs, Stock Photos, and the Myths

3.1 Official specs

AssetGoogle's published spec
FormatJPG or PNG
File size10 KB – 5 MB
Recommended resolution720 × 720 px
Minimum resolution250 × 250 px
Quality standard"In focus, well lit, and have no significant alterations or excessive use of filters or AI"
Video≤30 seconds, ≤75 MB, 720p or higher
Logo / cover dimensionsGoogle publishes none. The ubiquitous "1332 × 750 cover" is third-party guidance, not spec.
Recommended counts3+ exterior, 3+ interior, 3+ work/services, 3+ team, 1+ per common area

3.2 Stock photos — the actual policy

This is the finding most agencies miss, because the prohibition isn't on the GBP help pages. It's in the Maps user-contributed content policy, which GBP's photo policy explicitly incorporates:

Not allowed: "screenshots, stock photos, GIFs, collages, heavily edited or otherwise manipulated photos, or imagery created by other parties." Google Maps Photos & Videos format policy Official

Same policy: upload media "of a place that you captured using a camera," created "at the location you're posting to." A stock photo can additionally trip the fake engagement and misrepresentation policies.

Verdict

Stock photos on a GBP are policy-violating, not merely inadvisable. Enforcement is inconsistent and there is no documented case of suspension for stock photos alone — but they carry no upside and a real removal risk. Whitespark's 2026 survey ranks photo quality (explicitly "not stock") at #45 of local pack factors.

Related, and more concrete: the Google Images de-duplication effect

Joy Hawkins documented a dental client losing image traffic because a competitor used the identical stock photo — Google appears to collapse duplicate images and show only one. Removing the stock photo made the competitor appear; restoring it made them vanish again. Note this governs website images: GBP-hosted photos are not indexed in Google Images at all. Tested

3.3 Myths to remove from your SOPs

ClaimRealityStatus
Geotagging photos boosts local rankings GBP strips EXIF geotags on upload. Sterling Sky: 5 listings, 3 geotagged images each, weeks of tracking — no ranking or traffic change. Evergrow/SEL: 27 lawn care clients, 10 weeks, Local Falcon — only 1 of 7 metrics improved, city-name queries declined. John Mueller: "No need to geotag images for SEO." Myth
Keyword-stuffed image filenames help Two tests on a multi-location Florida dental practice: no measurable local pack lift. Myth
More photos = better rankings Sterling Sky, 4 listings across derm/home automation/lawn care/auto: "Adding photos to a Google My Business listing had no measurable impact on ranking in the local pack." Photos on the website with keyword alt text did produce ranking. Myth (ranking) / Tested (engagement correlation)
"Businesses with photos get 42% more direction requests and 35% more website clicks — Google" This is a legacy GMB help-center line from the mid-2010s. It is no longer on any live Google page. Stop citing it as current. Myth
"Google's Help Center now bans Midjourney/DALL-E/Getty/Unsplash and triggers manual audits + Map Pack suppression" Circulating on SEO blogs since May 2026. This language does not exist in Google's Help Center. Treat as fabricated content. The only real AI language is the quality standard: "no significant alterations or excessive use of filters or AI." Myth
"30-day photo freshness requirement / Contextual Verification scoring" Unfindable in any Google documentation. Fabricated. Myth

3.4 What photos are genuinely worth in 2026

Two real arguments, neither of which is direct ranking:

3.5 Healthcare imagery — the part with real legal exposure

Before/after and patient photos

Google has no rule against medical before/after images. The risk vectors are its general policies — violence & gore (raw post-op), sexually explicit content (body-contouring and breast before/afters are the most common real-world removal cause for plastic surgery and med spa profiles), personal information (identifiable faces without consent), and misrepresentation (retouched results).

The real risk is HIPAA, and it's enforced. Full-face photographic images and "any comparable images" are an enumerated HIPAA identifier under 45 CFR 164.514(b)(2)(i)(Q). Marketing use of PHI requires written authorization under 45 CFR 164.508. In September 2025, OCR settled with Cadia Healthcare for $182,000 over patient "success stories" posted with names, photographs and treatment details without valid authorization — roughly 150 patients affected, two-year corrective action plan including marketing staff training.

Cropping is not de-identification. Tattoos, scars and birthmarks keep an image as PHI.

Do

  • Shoot real, original photography — exteriors, ops, reception, team, equipment
  • Photograph clinical spaces empty by default
  • Sweep backgrounds for screens, charts, whiteboards, appointment boards before uploading
  • Get a separate signed authorization naming Google Business Profile and third-party platforms for any patient image
  • Follow ADA imaging standards on any clinical shot — PPE consistency, patient eyewear, lead shield on X-ray shots
  • Wait 14 days after verification or reinstatement before bulk-uploading (new listings are blocked from publishing images)

Don't

  • Use stock, licensed, or AI-generated imagery — explicit policy violation
  • Put before/after images on GBP; host them on the practice site where you control consent records, disclaimers and takedown
  • Rely on general treatment consent — it does not cover marketing
  • Waste time geotagging (stripped on upload) or keyword-stuffing filenames
  • Re-upload a "rejected" image immediately — there's a known false-negative bug; wait 48 hours
  • Use watermarked or heavily text-overlaid images

3.6 Photo troubleshooting

Why photos disappear, in order of likelihood: profile not verified → still processing → flagged not-approved → incomplete core business info (missing name, address, categories, phone or hours suppresses media) → low-quality cover photo replaced by a user submission. Community-reported additions: new listings under ~14 days old are blocked from publishing; SafeSearch classifier failures (test with the Cloud Vision API SafeSearch demo); duplicate/watermarked/copyrighted detection.

Customer-uploaded photos cannot be blocked. Removal is via Report a problem only, reviewed over several business days. Reporting the same item repeatedly delays review. And note: your cover photo selection is a suggestion — Google routinely overrides it with a query-relevant or recently-uploaded image.

360 / virtual tours: deprioritize. The Street View Trusted photographer program is effectively dead (the Street View app shut down March 2023), and no credible study shows ranking or conversion lift for a small clinic. Exception: practices where facility anxiety is the conversion barrier (sedation suites, spa-style ops) — and then it's a website asset first.

§4 Service Areas — The Most Over-Sold Field in Local SEO

You flagged this as super important. It is — but in the opposite direction from what most agencies assume.

The answer

Service areas have zero effect on local pack rankings or geogrid coverage. This is one of the most thoroughly settled questions in local SEO. For a dental practice with a physical office, adding them is unnecessary at best and conceptually wrong at worst. Do not sell service-area configuration as a ranking lever.

4.1 The evidence trail

TestMethodResult
Sterling Sky (2018, re-confirmed 2022, updated Jul 2025)Own profile, based in Uxbridge ON, listed Toronto as a service area, tracked ongoingNever ranked in Toronto. "The only impact that the service area has is visual."
Whitespark (Oct 2022) — the famous oneChristmas light installer, Saratoga Springs UT; showing the address collapsed all geogrid points beyond 15 milesDarren Shaw initially called it "the very first evidence" service areas matter. The article now carries a correction saying he was wrong.
Whitespark retraction test (Dec 2022)Removed service areas, kept address hidden"Absolutely no impact on his rankings whatsoever." The variable was address visibility, not service areas.
Whitespark controlled re-test (May–Jun 2024)Local Falcon geogrid; service area deliberately placed in the grid's upper-right corner to make expansion visible; two runs"There was no change in the business's rankings in the service area being tested." Twice.
Whitespark 2026 survey47 experts, 187 factors"Setting Service Areas in GBP" ranks #152, score 54. Meanwhile "Address Showing on GBP" ranks #7, score 176.

Whitespark's own field tier list grades service areas F tier — "a waste of time." As of March 2026 they were still answering the question directly: "The service areas do not have any impact on rankings. All they do is show the user where you're willing to travel to."

4.2 The mechanics you do need to know

ItemFact
Maximum areas20. Cities, postal codes, or other named areas. Official
Distance guidance"Shouldn't extend farther than about 2 hours of driving time from where your business is based." Note the softener: "For some businesses, larger service areas may be appropriate." Official
Radius-based areasRemoved by Google. Killed starting Nov 2018, conversion completed Sept 2019. Named areas only. Official
Can a storefront also set service areas?Yes — that's a "hybrid" (Google's examples: a dine-in restaurant that delivers, an auto shop with roadside service). The address stays visible. Adding service areas does not hide the address or reclassify the profile. Official
The "2-hour rule" misconceptionIt limits the size of one profile's territory. It is not a required minimum distance between two of your own locations. Sterling Sky argues verification failures blamed on it are usually caused by service-area overlap between your own profiles. Anecdotal
Do they sync to Local Services Ads?No. The GBP→LSA sync covers only business name, address and location type. LSA service areas are configured independently by county/city/zip, with include and exclude lists. Official
Display differenceAddress visible → map pin. Address hidden → shaded region outline, no pin. Anecdotal

4.3 What actually determines geographic reach

  1. The verified address. When the address is hidden, Google falls back to the originally-verified address as the proximity anchor — permanently. Hiding the address doesn't delete it.
  2. Whether the address is displayed. Top-10 ranking factor. Sterling Sky documented a case where hiding it made the local pack disappear entirely for a main keyword, returning when restored.
  3. Map pin placement. The address and the map pin are not the same thing. Proximity authority derives from the pin's geocoded coordinates. Whitespark 2026 ranks "Proper Map Pin Placement" #10.
  4. Competition density and query type. Radius is query-dependent, not business-dependent. A head term in a dense suburb reaches maybe 1–3 miles; a specialty long-tail term reaches 5–15; a rural practice with few competitors can reach 20+.
  5. Service-area pages on the website. This is the tactic that actually works — location pages with full NAP, community-specific content, area-specific reviews and photos, driving directions. Sterling Sky documents multi-year 3-pack rankings in distant communities from this.

4.4 Recommendation by client type

Client typeService areas?Why
Dental practice with a physical officeNo — skip itPatients travel to you. There's no outbound-service component, so "hybrid" doesn't really apply. Zero ranking upside. If they're already set and the address is visible, it's harmless — leave it.
Medical clinic / med spa / dermNoSame reasoning.
Mobile dentistry / in-home care / nursing home dentalYesGenuine hybrid. Set them accurately — but understand they're a communication field, not a ranking field.
Home-based therapist seeing clients at their locationsYes — requiredThis is Google's prescribed setup for a hidden-address SAB. See §5.

The one thing that will actually hurt you

Any workflow that leads a practice toward hiding the address in order to "become a service-area business" is actively destructive. Never hide a dental office address. Whitespark's 2026 survey scores "Showing Your Address on GBP When Business is a Service Area Business" as a negative factor with suspension risk 105, and "Setting Service Areas Larger Than 2-hours Driving Distance" at suspension risk 82. Both directions have a penalty — accuracy is the only safe position.

§5 Practices Without a Physical Address — Mental Health, Nutrition, Telehealth

Your side-business clients. This is the highest-risk category in your entire book, because the shortcuts everyone recommends are the exact things Google's policy was written to stop.

5.1 The three sentences that resolve almost every question

1. "A business must make in-person contact with customers during its stated hours." → Telehealth-only is ineligible. No healthcare carve-out exists.

2. "If your business rents a physical mailing address but doesn't operate out of that location, also known as a virtual office, that location isn't eligible for a Business Profile." → The mailbox workaround is explicitly dead.

3. "If you're a service-area business, you should hide your business address from customers." → Hidden-address SAB from home is Google's prescribed setup, not a loophole.

All three verbatim from Google's Guidelines for Representing Your Business and Policy Overview. Official

5.2 Eligibility decision tree

SituationEligible?Correct setup
Therapist works from home, clients come to the home office Yes (hybrid) You may show the address — but then the "permanent fixed signage of your business name at the address" requirement kicks in. Most home offices can't satisfy it, so hidden-address SAB is usually the better answer.
Therapist works from home, travels to clients (in-home, school-based, client-site) Yes Create profile → answer "No" to "location customers can visit" → verify with the real address → turn off "Show business address to customers" → set service areas within ~2hr drive.
Nutritionist/RD seeing clients at a rented, staffed, signed office Yes (storefront) Standard storefront. Show the address. It's a top-10 ranking factor.
Telehealth-only, no in-person contact ever No Do not manufacture eligibility. See §5.5 for the alternative stack.
Virtual office / mail forwarding / UPS Store / Regus virtual plan No Flatly ineligible. Blanket address-level suspensions at known virtual-office addresses are documented — Google pattern-matches the address, it does not review case by case.
Coworking dedicated office (WeWork/Regus) Only if all three conditions hold (1) clear signage with your business name, (2) receives customers there during business hours, (3) staffed by your staff — not the building receptionist. A hot desk or day pass never qualifies. Signage is where nearly every therapist setup fails.

The trap nobody tells you about

Hiding the address does not delete it. Google permanently retains the address the profile was verified at. So if a client verified at a virtual office three years ago and then hid it, that remains a live liability indefinitely — Google can still delete the listing if it surfaces. When you inherit an account, ask what address it was originally verified at.

5.3 Video verification — how to pass it

Every video must prove three things: location (where you are), business existence (it's real), and proof of management (you run it). Google's own guidance for SABs and home-based businesses:

The shot list for a home-based therapist

One continuous take, daylight, steady hands: street sign or house number and a neighboring landmark → walk to the home-office door → unlock it with your key (this is your management proof) → pan the therapy room → show intake paperwork, business cards, the appointment book or EHR on screen → hold up your state license certificate (LMFT/LCSW/LPC/RD) and a utility bill or business registration with the matching address → keep narrating throughout.

Common failure causes: stopping and restarting the recording (the single most common rejection) · the video contradicting the declared business model (declared SAB, filmed a storefront) · never showing anything only an owner could access · address in the video not matching the profile · a keyword-stuffed business name visible or declared · filming at a PO box, virtual office, or coworking space.

Pre-verification prep: have the website live at least a week beforehand with name, contact, service territory, hours and service descriptions. Build a few consistent citations first (BBB, Chamber of Commerce, professional directories). Have the license, registration, DBA, insurance and utility bills ready. After verification, wait 24–48 hours between significant edits — batching name/address/phone/category changes triggers re-verification.

5.4 Naming and categories

NameVerdictReason
Jane Doe, LMFTAllowedCredentials are part of the real-world professional name. Google explicitly permits "title or degree certification (Dr., MD, JD, Esq., CFA)."
Lakeview CounselingAllowedReal business name.
Lakeview Counseling: Jane Doe, LMFTAllowedGoogle's own prescribed format for a sole practitioner at a branded org (their example: "Allstate: Joe Miller").
Jane Doe, LMFT — Anxiety Therapy ChicagoViolation ×3Service information + location information + not the real-world name. This is the single easiest thing for a competitor to report anonymously, and it's a named video-verification failure trigger.

Category selection

Google's rule: pick categories that complete "this business IS a…", not "this business HAS a…"

SituationPrimary category
Solo licensed clinician, talk therapyPsychotherapist (or Counselor for LPC/LMHC branding)
Group practice, multiple clinicians, brand-firstMental Health Service
Larger clinic with premises and intake staffMental Health Clinic
Doctoral-level (PhD/PsyD)Psychologist
Couples / family focusMarriage or Relationship Counselor / Family Counselor
Child & adolescentChild Psychologist
Credentialed RD/RDNDietitian
Non-credentialed / holistic nutritionNutritionist

Two quirks worth knowing. "Mental Health Clinic" semantically implies a premises — pairing it with a hidden address is a mismatch that raises review risk; prefer Psychotherapist or Mental Health Service for hidden-address SABs. And in states where "dietitian" is a protected title, a category/credential mismatch is a real-world compliance problem well beyond Google.

5.5 If they're genuinely not eligible — the alternative stack

Don't fake it. Build visibility on surfaces that don't require verified physical presence:

  1. Vertical directories — Psychology Today, GoodTherapy, TherapyDen, Zencare, Alma, Headway, Inclusive Therapists. For therapists these are frequently higher-intent than Maps anyway.
  2. State-specific service pages. Clinicians are licensed by state, so state pages are both accurate and rankable. Then go granular per modality and per presenting issue.
  3. Schema markupOrganization + MedicalBusiness/Psychological, areaServed with the state list, Person schema per clinician, medicalSpecialty, credential markup. No address required.
  4. Insurance panel directories — BCBS, Aetna, Optum/UHC, Cigna provider finders. Often top-3 for "therapist who takes [insurance]."
  5. Bing Places and Apple Business Connect — different eligibility rules, worth testing. Apple Maps consumer usage nearly doubled (14% → 27%).
  6. Unstructured citations for AI surfaces — local press, community involvement, podcast appearances, professional association pages. Three of the top five AI-visibility factors are citation-related; "mentions are the new link."

5.6 Practitioner listings for group practices

This applies equally to multi-therapist practices and multi-dentist offices. Google's rules, verbatim:

Operational rules that make practitioner listings actually work

  • Different primary category from the practice, or they cannibalize each other. Practice = Dentist, practitioner = Pediatric Dentist. Practice = Mental Health Service, practitioner = Psychotherapist.
  • Unique phone number per practitioner listing where possible.
  • Point at their bio page, not the homepage.
  • When a practitioner leaves, do not mark the listing "permanently closed" — that signals the business closed. Mark it moved/removed. Google will now fully remove retired or deceased practitioners' listings on request.
  • You cannot force removal or merge of a practitioner's listing while they're still employed there. Ownership follows whoever verified it — a real problem when associates leave.

5.7 Suspensions — what to know before it happens

AdditiveAs of July 2026 Google stacks penalties rather than replacing them. Fix everything before appealing.
2 shotsFirst appeal, then one "request additional review." That's it.
1–6 wksTypical reinstatement window; spikes have hit 5–6 weeks.
1 accountA single restricted user account can suspend every profile it touches. Segregate ownership across a DSO.

Top causes: excessive/rapid profile edits (read as hijacking) · virtual offices, PO boxes, coworking · a compromised or restricted manager account cascading to every profile · duplicate listings · high-spam categories (including drug rehab) · online-only businesses · violations on other Google surfaces, particularly Google Ads.

Soft vs hard: soft = profile stays live but shows "Claim this business," rankings usually survive. Hard = removed entirely. Sterling Sky's finding: neither type causes lasting ranking damage if reinstated quickly — the profile returns to its prior positions. Multi-month suspensions in competitive markets are the exception.

Documentation to have ready before you need it: business registration, state license, tax certificate, utility bills at the address, lease, dated photos of signage/equipment. The appeals tool is the only channel — every other contact method redirects to it.

Do

  • Hidden-address SAB from home — it's Google's prescribed setup
  • Name the profile with the real practice name or the clinician's name plus credentials
  • Space edits 24–48 hours apart
  • Use a domain email as primary owner, not a personal Gmail
  • Keep a verification evidence folder for every client, permanently
  • For group practices: one practice profile + practitioner profiles with distinct categories

Don't

  • Rent a virtual office or mailbox to manufacture eligibility
  • Use a coworking hot desk or day pass address
  • Declare "customers can visit" when they can't — video verification will contradict you
  • Create a practice profile and a solo-practitioner profile when they're the same person
  • Keyword-stuff the name with services or cities
  • Appeal before you've fixed every violation — penalties now stack
  • Manage 40 locations from one personal Google account

§6 What Actually Ranks — 2026 Factor Weights

Whitespark's 2026 Local Search Ranking Factors: 47 local SEO experts, 187 factors, scored 0–5. New this year: factors are also scored for AI Search visibility. Scores are relative weights, not percentages.

6.1 Top 20, Local Pack / Maps

#FactorScoreWhat to do about it for a dental client
1Primary GBP Category227Dentist in ~99% of cases. Only deviate for a genuine hyper-niche (pediatric).
2Proximity of address to search point225Not controllable. This is why radius expectations must be realistic.
3Keywords in GBP business title223Only if legitimately in the registered name. See §9 for why stuffing is a trap.
4Physical address in city of search213Not controllable.
5Business open at time of search189Underrated. Accurate hours + holiday hours + extended/Saturday hours are a live ranking lever.
6High numerical rating (4–5)1814.5 is the operational floor.
7Address showing on GBP176Never hide a practice address.
8Additional GBP categories173Fill the slots — but see the state dental board warning in §9.
9Quantity of native Google reviews170Get past 10 fast, then optimize velocity.
10Proper map pin placement165Audit it. Address ≠ pin. A misplaced pin suppresses grid visibility.
11Recency of reviews164Continuous flow beats a burst.
12Proximity to centroid157Not controllable.
13CTR from local pack156Photos, rating, review count, justification text.
14Sustained review influx over time154Systematize the ask at checkout.
15HTML NAP matching GBP NAP153Watch call-tracking numbers here — see §6.3.
16GBP completeness147Every field, every attribute.
17–20Landing page title keywords · geographic keyword relevance · spam listing removal · landing page heading keywords146–135On-page work + redressal filings.
22Presence of GBP predefined services ⬆ from #81134Biggest riser in the study. This is your §2 work.

Top 5, Localized Organic

1) Dedicated page per service (210) · 2) geographic keyword relevance (190) · 3) quality/authority of inbound links (187) · 4) keywords in GBP landing page title (179) · 5) links from industry-relevant domains (175).

Note #1: a dedicated page per service outranks everything else on the organic side. This is the strongest argument for building out individual treatment pages and mirroring them to GBP services.

6.2 Things that do not rank (stop selling them)

TacticEvidence
GBP PostsSterling Sky: 3 listings, 9 weeks of weekly posts, 441 keywords tracked per location. "Google Posts do not directly affect local search ranking." Updated Feb 2026, so it's current. Average post CTR ≈ 0.5%. Posts earn their keep for profile real estate, seasonal offers and freshness signals to AI — not ranking. Tested
Service areasSee §4. Four tests, all null. Tested
Keyword-stuffed reviewsSterling Sky added 6 keyword-rich reviews to an 18-review base (33% growth), mid-summer to isolate seasonality. Rankings flat or declined; two reviews were removed by fraud filters. Stop coaching patients to write "best dentist in [city]." Tested
Review volume past ~16Sterling Sky tracked a listing 3→16 reviews (gains), then 16→31 (nothing). A separate 2025 test found a small bump crossing 9→10, none at 10→11. There's a floor effect around 10, then steep diminishing ranking returns. Volume beyond that is a conversion and AI-visibility play. Tested
Photo quantity, geotagging, filename keywordsSee §3.3. All disproven. Myth
Title tag lengthRanked #184 of 187 in the 2026 survey. Survey
Hundreds of low-authority directory citationsWhitespark explicitly advises against. 20–30 quality industry-specific directories, not volume. Survey

6.3 Operational gotchas most agencies miss

Call tracking vs NAP consistency

GBP call history was killed July 31, 2024 — you cannot get call counts from GBP anymore, which makes call tracking mandatory for phone attribution. But "HTML NAP matching GBP NAP" is a #15 ranking factor. Safe pattern: dynamic number insertion on the website only, GBP primary number = the real practice number, tracking number as the GBP secondary number. Putting a tracking number as GBP primary buys attribution at a ranked cost.

Audit every healthcare client for unauthorized booking links — today

Google auto-attached "Reserve with Google" buttons to healthcare profiles without practice consent, routing patients to third-party aggregators (OOOT, Practo, ClinicSoftware, Clinic Tracker, ZocDoc) — in one documented case with an address from six years prior. Unlike restaurants, healthcare had no dashboard removal control. Google Support cannot remove an API-integrated provider; you must contact the vendor, then file the Business Third Party Complaint Form, then escalate after 5 business days.

This is simultaneously a lead-leakage problem and a NAP accuracy problem. Check every profile.

UTM tag every GBP link or GBP gets no credit in your reporting

Untagged GBP traffic lands in Direct (mobile apps don't pass referral data) or gets absorbed into Organic. The standard scheme: utm_source=gbp · utm_medium=organic · utm_campaign=the feature (website / appointment / posts / products) · utm_content=to differentiate multiple links of the same type. Analyze in Looker Studio, not GA4's native UI. Note: URLs from the Products editor do not appear in Search Console.

§7 Reviews — Consumer Reality, and the HIPAA Trap

7.1 BrightLocal Local Consumer Review Survey 2026 (n=1,002 US adults)

31%require 4.5★+ — up from 17% last year
68%require 4.0★ minimum, up from 55%
74%want reviews from the last 3 months
47%won't use a business with fewer than 20 reviews
80%more likely to use a business that responds to all reviews
50%are deterred by generic, templated responses
45%now use ChatGPT/AI to check reviews — up from 6%
23%rely solely on AI-generated review summaries

Also: 78% of reviewers were asked, and 65% of those complied. Asking works. 19% expect a same-day owner response (up from 6%); 81% expect one within a week.

The tension you have to manage in healthcare

50% of consumers are put off by templated responses — but HIPAA effectively mandates generic responses. The resolution is warm generic: empathetic tone, varied phrasing, zero specifics. Never copy-paste identical text across reviews. Done well, this is a competitive edge, because almost every competitor is either robotic or non-compliant.

7.2 HIPAA — the highest-liability item in this entire document

Merely confirming or denying that someone is or was a patient is a disclosure. "Thanks for being a great patient, Susan!" on a five-star review is a violation. This applies to positive reviews too, which is where most practices get blindsided.

ProviderYearAmountPlatformWhat was disclosed
Dr. U. Phillip Igbinadolor, D.M.D. & Assoc. (dental, NC)2022$50,000 CMPGoogle reviewPatient full name + services received + derogatory commentary. Classified "willful neglect — not corrected"; aggravated by ignoring OCR's data request and subpoena.
Manasa Health Center (psychiatric, NJ)2023$30,000Google ReviewsPHI of 4 patients including mental health diagnoses
New Vision Dental (CA)2022$23,000YelpPatients' full names where they'd used pseudonyms, treatment details, insurance
Elite Dental Associates (TX)2019$10,000YelpSurname, condition, treatment, insurance, cost
Cadia Healthcare2025$182,000Marketing "success stories"~150 patients' names, photos and treatment details without authorization

Three of the five are dental practices. This is a live, repeatedly-enforced risk in your exact vertical.

"Providers cannot disclose the protected health information of their patients when responding to negative online reviews. This is a clear NO." Melanie Fontes Rainer, OCR Director Official

Compliant response templates

Positive review — the ADA's own safe answer: "Thank you!"

Negative review: "We value feedback about patient experience. Out of consideration for privacy rights, we do not disclose any patient information on public forums. We encourage anyone who would like to discuss their experience to contact our office directly."

Rules for the SOP: never confirm or deny patient status, even implicitly ("during your visit," "your treatment plan") · never reference dates, procedures, insurance, billing or clinical detail · never correct the factual record publicly, however wrong the review is · describe processes generically, never the individual · move it offline immediately · pre-approve templates with the practice's counsel or privacy officer.

AI review-response tools: only use vendors with no PHI access. An AI tool wired into the PMS drafting review replies is serious exposure.

Note the ADA petitioned the FTC in January 2023 for a healthcare carve-out allowing disclosure when rebutting deceptive reviews. It was not granted. And: "Just because a patient identifies themself in a review, they have NOT waived their right to privacy."

7.3 Review gating is now double jeopardy

Google side: gating is classified under Deceptive content. Reported consequence is removal of your entire review profile, not just the gated reviews. Google's policy also prohibits offering incentives, requiring or pressuring users to review while on the premises, requesting specific content, and reviews from employees or contractors.

Federal side: the FTC Consumer Reviews and Testimonials Rule (16 CFR Part 465) took effect October 21, 2024 and carries civil penalty authority for first-time violations, which the FTC previously lacked. It bans fake and AI-generated reviews (§465.2), incentives conditioned on sentiment (§465.4), undisclosed insider reviews (§465.5), company-controlled "independent" review sites (§465.6), and review suppression via threats or intimidation (§465.7).

The "survey first, only send the Google link to 4s and 5s" workflow that many dental reputation platforms still ship is a violation of both Google's policy and 16 CFR 465. Vendor liability doesn't protect the practice — the practice is exposed even when a third-party platform runs the gating. Audit what your reputation vendors are actually doing.

Compliant alternative: ask for private feedback first without mentioning reviews at all, then ask everyone — including detractors — for a public review.

§8 AI, GEO & AEO — Where Local Discovery Is Actually Going

8.1 The visibility gap is brutal

SOCi's 2026 Local Visibility Index analyzed ~350,000 locations across 2,751 multi-location brands:

Surface% of locations recommendedAvg rating of recommended locationsProfile data accuracy
Google local 3-pack35.9%3.9★
Gemini11%3.9★100%
Perplexity7.4%4.1★~68%
ChatGPT1.2%4.3★~68%

Search Engine Land's summary: "AI visibility is three to 30 times harder to achieve than ranking well in traditional local search." Local Falcon's February 2026 restaurant study (189,905 ChatGPT results) found 83% of restaurants completely invisible on ChatGPT vs. 14% on Google — 10× worse for US businesses.

8.2 Each engine has a different data supply chain — optimize accordingly

EnginePrimary local data sourceYour lever
Gemini / Google AI ModeGBP directly (100% profile accuracy)Optimize the GBP itself. Categories, services, hours, reviews, attributes.
ChatGPTYelp (licensing deal, July 2026) + open webReactivate Yelp for every healthcare client. Completeness, review volume, rating, photos.
PerplexityMixed web / licensed data (68% accuracy)NAP consistency + unstructured citations. It's reconstructing your business from scattered mentions.

The strategic shift of 2026: Yelp is now an AI asset

In July 2026 Yelp began licensing reviews, ratings, photos and local business information to OpenAI, surfaced in ChatGPT local recommendations with Yelp branding. Yelp's "Request a Quote" is planned inside ChatGPT. The deal is non-exclusive — Yelp can license to others, and it already syndicates to Apple Maps.

If you've deprioritized Yelp for dental and medical clients on the reasonable grounds that it drives little direct traffic, that calculus has changed. Yelp is now an input to the surface where 45% of consumers say they check reviews.

8.3 What Google AI Mode draws on

Per Whitespark's May 2026 guide: GBP (ratings, hours, contact info) · review platforms including Yelp · unstructured citations (blogs, news, community pages, social) · website content and FAQs · industry publications and sponsorship pages.

Mechanics that matter: query fan-out — the system issues multiple related sub-queries rather than one. Results are personalized, so every user sees different results for identical queries. Being in the top 10 organic gives only about a 25% chance of appearing in AI Overviews. AI Overviews appeared in roughly 68% of local searches in Q1 2025, and 67% of consumers don't fact-check AI sources.

8.4 The Q&A section is gone — and what replaced it changes the play

On December 15, 2025 Google removed the public-facing Q&A section from Maps, replacing it with an AI-powered "Ask" button that returns "an updated, instant answer based on your answers and relevant reviews." Owners now answer aggregated questions on the backend rather than individual ones.

Implications: seeding your own Q&A is now largely obsolete as a conversion tactic — there's no public surface for prospects to read it. But owner-provided answers are now AI training input. And reviews double as Q&A source material, since Ask Maps synthesizes from both. The FAQ content that used to live in GBP Q&A should move to the website FAQ, written in conversational language.

8.5 Local AEO/GEO action list

  1. Get every client above 4.5 stars. This is now a gating threshold for AI recommendation, not just a conversion nicety — ChatGPT's recommended locations averaged 4.3, above the 3.9 that suffices in traditional search.
  2. Rebuild Yelp profiles for healthcare clients. Complete, photographed, actively reviewed.
  3. Write website FAQs in conversational language — the exact phrasing patients use when talking to an assistant, not keyword-optimized headers.
  4. Build unstructured citations — local press, community sponsorship, professional associations, podcast appearances. Three of the top five AI-visibility factors are citation-related; "mentions are the new link."
  5. Fix NAP everywhere. The 68% accuracy figure on ChatGPT and Perplexity is a citation-hygiene problem, and it's fixable.
  6. Enroll in Reserve with Google — explicitly named as an AI-visibility optimization. Dental integrations exist via NexHealth, Planet DDS, Dental Intelligence, Zocdoc.
  7. Answer the aggregated Ask Maps questions thoroughly. That's now AI input, not page furniture.
  8. Change what you report. Impressions are down ~54% YoY while actions held roughly flat. AI Local Packs show fewer businesses (32% fewer unique businesses surface) and often drop the click-to-call button entirely. Report actions, calls and booked appointments — not impressions — or every QBR reads as a failure that isn't one.

Measurement caveat

Most geogrid tools cannot yet detect AI Local Packs. Grid scores can look flat while actual calls fall. Sterling Sky's analysis across 179 GBPs found year-over-year call declines even for businesses holding top positions. Always pair grid data with GBP Performance action trends and call tracking.

§10 Platform Changes 2024–2026 — What Broke, What's New

DateChangeImpact on healthcare clients
Jul 1, 2024Health provider attributes + insuranceNetworks API discontinuedProgrammatic insurance-accepted management is dead. UI only.
Jul 31, 2024Chat and call history discontinuedYou cannot get call counts from GBP. Call tracking is now mandatory for attribution.
Oct 21, 2024FTC Consumer Reviews Rule effectiveCivil penalties for review gating, fake reviews, undisclosed insider reviews.
Oct 2024Unauthorized Reserve with Google links on healthcare profilesAudit every client. Lead leakage + NAP corruption.
Oct 20, 2025"Google Verified" replaces Guaranteed/Screened; money-back guarantee discontinuedUpdate every deck and proposal.
Oct–Nov 2025Call buttons replaced with images in local packs for several industriesPhoto quality now does conversion work the call button used to.
Nov 3, 2025Q&A API discontinuedAny automation touching Q&A is broken.
Dec 15, 2025Public Q&A removed from Maps → AI "Ask" buttonQ&A seeding is obsolete. Move FAQ content to the website.
Jan 2026AI Local Packs on ~8% of keywords; 32% fewer unique businesses surface; call buttons often strippedShift reporting from impressions to actions.
Apr 7, 2026Maps contributor updates: one-tap camera-roll posting, Gemini-suggested captionsExpect more patient-uploaded photos. Monitoring cadence matters more.
May 2026Suspension spike triggered by user account restrictions, hitting clean profilesSegregate account ownership across a DSO. Anecdotal
Jun 22, 2026"Collected Info" — confirm business data Google gathered from third partiesNew audit surface. Check it.
Jun 26, 2026Messages button returns with an "AI Agent"Compliance-review before enabling for healthcare — an AI agent conversing with prospective patients raises PHI-intake questions. Anecdotal
Jul 3, 2026Penalties are now additive — violations stack rather than resetFix everything before appealing. Review lockouts double on repeat.
Jul 8, 2026Appeals workflow now supports inline evidence uploadMeaningfully better reinstatement odds. Prepare documents in advance.
Jul 21 / 31, 2026LSAs migrating into main Google Ads; D-U-N-S requirement beginningPlan account migration for LSA clients.
Jul 28, 2026Yelp licenses reviews/ratings/photos to OpenAI for ChatGPTReactivate Yelp for every healthcare client.
2026 ongoingGBP impressions down ~54% YoY; actions roughly flatReframe every QBR before a client reframes it for you.

Best single source to monitor continuously: Sterling Sky's Google Local Changes log.

§11 Build SOP & Recurring Audit

11.1 New client GBP build — sequence matters

  1. Eligibility check. In-person contact during stated hours? Real staffed address with signage? If telehealth-only or virtual office — stop, go to the §5.5 alternative stack.
  2. Categories. Primary = what the business is. Fill secondaries with what they genuinely provide. Screen every specialty-implying category against state board rules.
  3. Core NAP + hours. Real practice number as primary. Accurate hours, including holidays — "open at time of search" is the #5 ranking factor.
  4. Map pin verification. Drop it on the actual entrance. Address ≠ pin.
  5. Services. Predefined first, one home per service, custom only for real gaps. Then 300-char descriptions.
  6. Products. 8–12 merchandised treatment cards with real photos, prices where the practice will honor them, and Learn More links to matching service pages with UTMs.
  7. Photos. Original only. 3+ each of exterior, interior, team, work. Never stock. Wait 14 days post-verification before bulk upload.
  8. Attributes. Accessibility, languages, insurance, appointment/booking, identity attributes where accurate.
  9. Booking integration — and remove any unauthorized third-party booking link already there.
  10. UTM-tag every link on the profile.
  11. Mirror to the website — service page per service, matching H1s, hasOfferCatalog schema, NAP in HTML matching GBP exactly.
  12. Review system. Compliant ask (everyone, no gating, no incentives) + pre-approved HIPAA-safe response templates.
  13. Baseline geogrid. 9×9 or 11×11 at 1.5–2 mi for head terms; second scan at 5–7 mi for specialty terms. Track share of grid in top 3, not average rank.

11.2 Monthly audit checklist

CheckWhy
Services list vs. last month's screenshotGoogle adds and re-adds services silently from third-party sources
Unauthorized booking / Reserve with Google linksDocumented healthcare-specific problem; lead leakage
Suggested edits and "Collected Info" actionsGoogle will unilaterally change hours, categories and contact info
Customer-uploaded photosOne-tap posting from camera roll shipped April 2026; volume is up
Cover photo still the one you choseGoogle overrides it routinely
NAP: GBP vs. website HTML vs. top 20 citations#15 ranking factor; also the fix for 68% AI data accuracy
Review velocity, rating vs. 4.5 floor, response rate and latencyRecency is what consumers and AI both weight
Review responses for HIPAA violationsEspecially responses written by front-desk staff without training
Competitor name spam → redressal filingsEnforcement is manual and complaint-driven
Geogrid + GBP Performance actions + call tracking, togetherGrid tools can't see AI Local Packs; grids look flat while calls fall

11.3 Honest gaps — do not fabricate these for clients

The one-line version for a client conversation

Get the category right, keep the address visible and the pin accurate, build the predefined services list properly, hold above 4.5 stars with a steady flow of recent reviews, put original photography on the profile, and mirror every service to a real page on the website. Almost everything else — service areas, geotagging, posts for ranking, keyword-stuffed reviews — is either neutral or a myth.