Staff posting on Reddit, forums and Wikipedia

A practice owner sees a thread on a local Reddit community asking for a good dentist in town and wants to answer. A hygienist replies to a forum post about whitening and mentions where they work. An office manager notices that the practice’s Wikipedia article is out of date and fixes it. A physician answers a stranger’s symptom question in a health forum late at night. Each of these feels like ordinary participation online, and each is covered by rules on disclosure, patient privacy, platform terms or medical licensing. This guide is for owners, physicians, dentists, office managers and staff at independent medical, dental, med spa, chiropractic and integrative practices.

It covers the FTC Endorsement Guides on material connections, the FTC rule on insider reviews and company-controlled review sites, the Reddit Rules and Wikipedia terms that matter for practice staff, what HIPAA means for a reply to someone who turns out to be a patient, and where answering health questions from strangers starts to look like practicing medicine. Staff posting rules in general are in our social media policy guide, paid creators are in our influencer marketing guide, and replies to reviews are covered in HIPAA and negative review replies. Company accounts, sponsored employee posts and Lead Gen Forms on LinkedIn are covered in our guide to LinkedIn ads and posts for healthcare companies. For paid campaigns on Reddit, see our guide to Reddit Ads for medical practices. For Quora’s own rules on affiliation disclosure and promotional answers, see our guide to Quora for healthcare practices. The same disclosure rules apply on the apps in our guide to Threads and Bluesky for medical practices.

This is general information, not legal advice. Sources cited were checked on October 30, 2026: 16 CFR 255.1 and 255.5; 16 CFR 465.1, 465.2, 465.4, 465.5 and 465.6; 45 CFR 160.103, 164.502, 164.514 and 164.530; the Reddit Rules; the Wikimedia Foundation Terms of Use (in effect since June 7, 2023), the English Wikipedia paid-contribution disclosure policy and conflict of interest guideline; Google Search Central documentation on discussion forum markup (last updated September 8, 2026); the Federation of State Medical Boards policy on social media and electronic communications (April 2019); and Texas Occupations Code 151.002 and 151.056. State rules on licensing, advertising and patient privacy differ from state to state, so check yours, and have a health care attorney review your staff posting policy before you rely on it.

The short version

Say who you are. When an owner or employee praises the practice in a forum, the connection has to be disclosed clearly and conspicuously in the post itself, because readers would not expect it.
No posing as a patient. A review or post written by the practice that pretends to come from a patient who does not exist, or who had a different experience, is a fake review under 16 CFR 465.2.
Patient information stays out of replies. Confirming that a commenter is a patient, or adding details of their care, is a disclosure the HIPAA Privacy Rule does not permit without their authorization.
Wikipedia has its own disclosure rule. Anyone paid to edit, including as part of their job, must disclose their employer, client and affiliation, and English Wikipedia strongly discourages direct edits to articles where the editor has a conflict of interest.
General information, not personal advice. Answering a stranger’s specific symptoms can look like diagnosis, and state licensing law decides when that becomes the practice of medicine.

Why forum posts are a marketing question

Discussion threads are where people ask for recommendations in their own words, and Google treats them as a source of first-hand experience. Google’s Search Central documentation says discussion forum markup helps Google Search identify online discussions across the web and use them in features such as Discussions and Forums. A thread asking for a chiropractor in your town can sit next to your own website in the results, which is why owners and staff are tempted to answer.

Nothing in federal law stops a practice owner or employee from taking part in an online community. The rules below are about how they take part: whether readers know who is speaking, whether a patient’s privacy is protected, whether the platform’s terms are followed, and whether a reply crosses from general information into care for a specific person. Our local SEO work builds visibility through your own website and Google Business Profile, so nobody on your team needs to post in disguise.

Disclose the connection: the FTC Endorsement Guides

Under 16 CFR 255.5(a), when a connection between the endorser and the seller might materially affect the weight or credibility of an endorsement, and the audience would not reasonably expect it, the connection must be disclosed clearly and conspicuously. The rule lists a business, family or personal relationship, payment, and free or discounted products as examples of material connections. A disclosure needs to say enough about the nature of the connection for readers to judge the endorsement, not the full details.

The Guides give an example that reads as if it were written for forums. In Example 8 of 255.5, an employee of a manufacturer posts messages on an online community’s discussion board promoting the employer’s new product, and the community does not know. The Guides say knowledge of the poster’s employment likely would affect the weight or credibility of the endorsements, so the poster should clearly and conspicuously disclose the relationship. They also say the employer should train employees and, if it directed the posts or has reason to know about them, monitor them and take other steps to ensure compliance. The same example says these disclosure requirements apply equally to employees posting their own reviews on review platforms. If your team also watches these communities for mentions of your practice or products, our guide to social listening covers what you may do with what you find.

For a practice, that means a post such as “I go to [Practice name] and they are great” from the owner’s spouse, the front desk lead or the practice’s own physician needs a disclosure in the post. A username alone does not do it, and neither does a line on a profile page that readers may never open. Clear wording works: “I own this practice”, “I work at [Practice name]” or “My spouse runs this office”.

Insider reviews and fake patients: the FTC review rule

The FTC rule on consumer reviews and testimonials, 16 CFR part 465, adds specific prohibitions on top of the Guides. Under 465.1(d), a consumer review is an evaluation of a product, service or business published to a website or platform dedicated in whole or in part to receiving and displaying such evaluations. A recommendation thread can be closer to that than an owner expects, and a testimonial reused in the practice’s own advertising is covered separately under 465.1(f).

Owners and managers writing reviews. Under 465.5(a), an officer or manager may not write or create a review or testimonial about their own business without a clear and conspicuous disclosure of their relationship to it. Under 465.1(l), officers include owners.
Testimonials from staff. Under 465.5(b), a business may not disseminate a testimonial from its officers, managers, employees or agents without a clear and conspicuous disclosure of the relationship, when it is not otherwise clear to the audience and the business knew or should have known about it.
Asking staff and relatives for reviews. Under 465.5(c), an officer or manager may not solicit reviews from their immediate relatives or from employees or agents when the resulting reviews lack a disclosure and the manager discouraged disclosure, did not instruct reviewers to disclose, or knew or should have known an undisclosed review appeared and took no remedial steps.
Paying for positive posts. Under 465.4, a business may not provide compensation or other incentives conditioned on reviews expressing a particular sentiment, positive or negative.
Sock puppet accounts. Under 465.2(a), a business may not write or create a review or testimonial that materially misrepresents that the reviewer exists, that they had experience with the business, or what that experience was. A second account that poses as a happy patient fits this description.

Section 465.6 covers a related tactic. A business may not materially misrepresent that a website or entity it controls, owns or operates provides independent reviews or opinions about a category of businesses that includes its own. A “best clinics in [Town]” forum or blog run by a practice that recommends itself is the situation the rule describes. Our directory listings guide covers the same rule for listing sites.

Platform rules: Reddit and online communities

Platforms add their own terms. Rule 2 of the Reddit Rules asks users to abide by community rules, participate authentically in communities where they have a personal interest, and not spam or engage in disruptive behaviors, including content manipulation. Rule 5 says users do not have to use their real names, but must not intentionally mislead others or impersonate an individual or entity in a deceptive manner. Each community also sets its own rules, and local communities may ban self-promotion outright or limit it to a weekly thread.

An anonymous account is allowed under those rules, but anonymity does not remove the FTC disclosure duty. The Example 8 employee in the Endorsement Guides was posting without the community knowing who they were, and that is exactly why disclosure was needed. A practical rule for your team: if a post mentions the practice, the poster says how they are connected, whatever username they use. If a community’s rules forbid business promotion, staff do not mention the practice there at all. If your company hosts its own community, our guide to brand-run patient communities covers labels for staff, moderators and rewarded members.

Wikipedia: paid editing and conflicts of interest

The Wikimedia Foundation Terms of Use, in effect since June 7, 2023, include a section titled Paid Contributions Without Disclosure. It says anyone must disclose each employer, client, intended beneficiary and affiliation for any contribution for which they receive, or expect to receive, compensation. The disclosure goes in at least one of three places: a statement on the user page, a statement on the talk page accompanying the paid contributions, or a statement in the edit summary. The terms also say logged-out paid editing that makes adequate disclosure a practical impossibility violates the section.

English Wikipedia’s paid-contribution disclosure policy repeats the duty and says it does not matter whether the editor is paid directly by the client or indirectly by an employer on behalf of the client. Its conflict of interest guideline goes further. It strongly discourages editors with a conflict of interest, including paid editors, from directly editing affected articles. Instead they may post proposals on the article’s talk page, and new articles should go through the articles for creation process for review before publication.

For a practice, the safe reading is this: if updating the practice’s or the owner’s article is part of anyone’s job, including an employee, a family member helping out, or an agency, treat it as paid editing. Disclose it as the terms require, propose changes on the talk page instead of making them, and cite independent published sources, because volunteer editors decide whether to accept the request. Do not create accounts to edit around a declined request.

Patient information in forum replies

Under 45 CFR 164.502(a), a covered entity may not use or disclose protected health information except as the Privacy Rule permits or requires. A public reply in a forum is not on that list. Under 45 CFR 160.103, the workforce includes employees, volunteers, trainees and others whose conduct in their work for the practice is under its direct control, and the practice must train them on its privacy policies under 164.530(b) and apply sanctions when the policies are broken under 164.530(e).

Three situations come up in forums:

A patient posts about their visit. Even when they name the practice and describe their own care, a reply that confirms they are a patient or adds details of their treatment discloses protected health information. The OCR settlements described in our review reply guide rested on replies like that.
A staff member tells a case story. Under 164.514(a), health information is not individually identifiable only when it does not identify the person and there is no reasonable basis to believe it could be used to identify them. A story with a date, a town, an age and an unusual condition can point to one person, especially in a small community.
Someone asks whether a person was seen. Staff neither confirm nor deny, in a forum or anywhere else. The same answer applies when a reporter asks, as our media inquiries guide explains.

Answering health questions from strangers

The Federation of State Medical Boards adopted its policy on social media and electronic communications in April 2019. It recommends that physicians not give medical advice to specific patients online unless through a secure patient portal. It is professional guidance, not a statute, but state boards can draw on it when they review conduct.

State licensing law is where the line is set. In Texas, Occupations Code 151.002(a)(13) defines practicing medicine as the diagnosis, treatment or offer to treat a disease, disorder, deformity or injury by any system or method, by a person who publicly professes to be a physician or surgeon or who charges for those services. Section 151.056 says a person physically located in another jurisdiction who, through any medium including an electronic medium, performs an act that is part of a patient care service initiated in Texas and that would affect the diagnosis or treatment of the patient is considered to be practicing medicine in Texas. Whether a particular forum reply meets those definitions is a legal question, and other states write their rules differently, so check yours.

The practical approach is the same in any state. Answer in general terms, such as what a condition is, what questions to ask a clinician and when to seek care. Do not tell a stranger what they have or what to take. If the question describes an emergency, tell them to call 911, and if it describes a mental health crisis, tell them to call or text 988.

A posting policy for owners and staff

Disclosure in each post. Any post that mentions the practice, its services or a competitor says how the poster is connected, in the post itself.
No second accounts. Nobody posts as a patient, a neighbor or a satisfied customer they are not.
No patient details. No confirming who is a patient, no case stories that could identify someone, no replies about a person’s care.
General information only. Clinicians answer general questions and point personal ones to a visit.
Community rules first. Read the rules of each community before posting, and skip communities that ban promotion.
Wikipedia through the talk page. Disclose, propose and cite. No direct edits to the practice’s or owner’s article.
Training and records. Train staff on the policy, keep a record of the training, and say who reviews posts made on the practice’s behalf.

Section 7 of the National Labor Relations Act protects employees who discuss working conditions together, so a policy that bans all comment about the workplace can cause problems. Our social media policy guide covers that part, and an attorney should review the wording.

Questions to ask before anyone posts

Would a reader of this thread know that the poster owns, works for or is related to the practice?
Is the disclosure in the post itself, in plain words, and not only on a profile?
Does the post confirm or suggest that any person is a patient?
Could the details in a story identify a patient to someone who knows them?
Is the poster telling a specific person what condition they have or what to do about it?
Do the community’s own rules allow business mentions?
Is anyone being paid, rewarded or asked by a manager to post?
For Wikipedia, is the change proposed on the talk page with a disclosure and independent sources?

Use and avoid

Use: “Full disclosure, I own [Practice name], so I am biased. Here is what to ask any office you call.” Avoid: “I have been going to [Practice name] for years and they are the best.” from the owner’s account.
Use: “I work at a dental office in town, so I will not recommend a specific one, but here is what to look for.” Avoid: recommending your employer without saying you work there.
Use: “I am sorry to read this. Please call our office manager at [contact] so we can talk privately.” Avoid: “We checked your chart and you missed two appointments.”
Use: “These symptoms are worth a visit to a clinician who can examine you.” Avoid: “That sounds like [condition], take [treatment].”
Use: a talk page request that discloses “I am employed by [Practice name]” and cites independent sources. Avoid: editing the article directly or logged out.

An illustration

This example is invented. A user on a community forum for [Town] asks for a chiropractor who takes their insurance. The office manager at [Practice name] sees the thread, and the owner asks whether they should both reply and ask a few staff to add their own recommendations.

The office manager checks the practice’s posting policy instead. The community rules allow one self-promotional reply from a business per thread. The owner posts once: “I own [Practice name], so take this with that in mind. We are in network with [plan]. Whatever office you pick, call your plan and ask whether the specific chiropractor is in network.” Nobody else from the practice replies, and nobody is asked to. A week later a patient adds a comment describing their own visit. The practice does not respond to it in the thread, because a reply would confirm that the commenter is a patient.

Checklist

Write a short posting policy for owners, clinicians, staff and family who help out.
Require a plain disclosure in each post that mentions the practice.
Ban second accounts and posts written as if from a patient.
Keep patient information out of replies, including confirming that someone is a patient.
Limit clinicians to general information online and route personal questions to a visit.
Check each community’s rules before anyone posts on the practice’s behalf.
Route Wikipedia changes through the talk page with a paid-editing disclosure.
Train staff, record the training and apply sanctions when the policy is broken.

How we help

We build practice websites, local SEO, Google Ads and lead generation and an AI front desk for independent practices. For forums and community sites, we do not post as patients or neighbors, we do not edit Wikipedia on your behalf, and we focus on your own website and Google Business Profile so readers can find accurate information about your practice. Our tools are built with HIPAA in mind. We confirm in writing what a BAA covers before any patient information flows through a tool, and if it is not covered, we do not route patient information through it. We are not a healthcare provider and we do not give legal or medical advice. For the wider rules, see our healthcare marketing rules guide.

Can a practice owner recommend their own practice on Reddit?

Yes, if the community’s rules allow it and the post clearly says they own the practice. Under 16 CFR 255.5(a), a connection readers would not expect must be disclosed clearly and conspicuously, and under 465.5(a) an owner may not write a review of their own business without disclosing the relationship.

Is an anonymous username enough of a disclosure?

No. Example 8 in 16 CFR 255.5 describes an employee posting in an online community without readers knowing about the employment, and says the poster should clearly and conspicuously disclose the relationship. Reddit Rule 5 allows usernames that are not real names but forbids intentionally misleading others.

Can our office manager update the practice’s Wikipedia article?

Not directly, under English Wikipedia’s conflict of interest guideline, which strongly discourages editors with a conflict from editing affected articles and points them to talk page proposals. If the work is part of their job, the Wikimedia Terms of Use require disclosure of the employer and affiliation on the user page, the talk page or the edit summary.

A patient praised us in a forum. Can we thank them?

Not in a way that confirms they are a patient or mentions their care. Under 45 CFR 164.502(a), that would be a disclosure the Privacy Rule does not permit without the patient’s authorization. Leave the post alone or reply in general terms that do not confirm anything.

Can a physician answer health questions in a forum?

General information is one thing; personal advice to a specific person is another. The FSMB recommends not giving medical advice to specific patients online except through a secure portal, and state law, such as Texas Occupations Code 151.056, can treat acts affecting a patient’s diagnosis or treatment through an electronic medium as practicing medicine in that state.

Sources

More in Local SEO and reviews for practices

Owners and staff posting on Reddit, forums and Wikipedia: disclosure, privacy and licensing rules