Industries · Practices and professionals
Doctors, clinics and hospitals
A practitioner's reputation is built over years and tested in a single review. Spy Monk helps clinics see what patients and the press are saying, respond without breaching confidentiality or professional rules, and keep a verifiable record when a matter becomes serious.
Updated By Drive Digital Editorial
No card needed
No soliciting or sharing of patient reviews for promotion · No testimonials or cure claims · Patient confidentiality in every reply
Direct answer
How should a doctor or clinic in India handle negative online reviews and reputation risks?
Respond briefly without disclosing anything about the patient, offer a private channel, fix the underlying problem, and report a review only if it breaks the platform's rules. Never solicit, incentivise or share patient reviews for promotion: the National Medical Commission's 2026 guidelines prohibit it, with testimonials, cure claims and rating manipulation. Spy Monk structures that process and keeps the evidence.
- NMC Guidelines on Ethical Advertising and Public Communication, notified 6 October 2026
- Practitioners shall not request or share patient testimonials, endorsements or reviews for promotion
- Manipulating reviews, ratings, followers or search rankings is prohibited; penalties are graded
- Case types for reviews, news, impersonation and blackmail, with fingerprinted evidence
The landscape
Where a clinic's reputation now lives
Patients in India choose a doctor the way they choose everything else: a search, a map listing, a star rating, a few reviews, perhaps a video. For a clinic that has never advertised, that public page is its marketing — and it is written by other people. A single detailed complaint about waiting time or billing can sit at the top of the listing for a year. A health-news report that misstates a procedure can follow a surgeon across every search of their name. An impostor account offering consultations or medicines in a practitioner's name can harm patients before anyone at the clinic has seen it.
The constraints on responding are tighter than in any other sector. The Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002 — still the operative code after the 2023 regulations were held in abeyance — restrict soliciting and advertising. In October 2026 the National Medical Commission added detailed Guidelines on Ethical Advertising and Public Communication for practitioners and hospitals. Among other things they bar promises of a cure, success-rate claims and labels such as "best doctor" or "No.1 specialist"; prohibit before-and-after photographs and celebrity-patient publicity outside anonymised scientific use; require practitioners' posts to carry their name, qualifications and registration number; state that practitioners shall not request or share patient testimonials, recommendations, endorsements or reviews for professional promotion; and prohibit manipulating reviews, ratings, followers or search rankings. Penalties are graded from a warning and ethics training to removal from the register. Patient confidentiality applies to every public word, and patient data is personal data under the Digital Personal Data Protection Act, 2023.
That is why clinics need a process rather than a reflex. Spy Monk gives a practice manager and the practitioner a shared, auditable way to see what is public, decide what to say, keep every reply within the rules, and preserve evidence when a review, article or impostor crosses a line.
What Spy Monk does for clinics
Built around the rules, not against them
- Available now
Audit of the practitioner, the clinic and aliases
Search the doctor's name, the clinic's name, Hindi spellings and common misspellings across news, search and video sources, with a coverage table showing what was and was not checked.
- Available now
Scheduled monitoring with high-risk alerts
Weekly or daily runs by plan; new mentions de-duplicated and classified; an email when something is assessed as high risk.
- Available now
Review cases with confidentiality-safe replies
A reply pattern that thanks, acknowledges and invites a private conversation without confirming the person was a patient or discussing treatment. Approved before posting.
- Available now
Health-reporting corrections
News and video cases that isolate the disputed clinical or factual statement and prepare a documented correction request for the publisher.
- Available now
Impersonation and blackmail cases
Impostor profiles offering consultations, and threats to publish allegations unless fees are refunded, handled as urgent cases with fingerprinted evidence and official-route signposting.
- Phase 2
Google Business Profile review sync
Reading your own listing's reviews directly needs the Phase 2 connector. Today, add review URLs to cases yourself.
What Spy Monk will not do
Lines we hold for clinics
- It will not help you collect, display or amplify patient reviews or testimonials. The NMC guidelines prohibit practitioners from requesting or sharing them for promotion; Spy Monk has no review-generation feature and will not add one for clinics.
- It will not help you remove honest criticism. A patient's account of a long wait or an unexpected bill is lawful feedback. The response is to fix it and say so privately.
- It will not reveal patient information in a reply, and it will not help you confirm publicly that a reviewer was a patient. Confidentiality does not end when a patient posts.
- It cannot remove a review or an article. Platforms and publishers decide; Spy Monk prepares and records.
- It will not identify anonymous reviewers. Only a court or competent authority can direct disclosure.
- It gives no legal or professional-conduct advice. For questions about the regulations or a complaint before a medical council, consult a qualified professional.
How it works
A clinic's month with Spy Monk
Audit the practitioner and the clinic
Create entities for the doctor and the establishment with aliases and location. Run the free audit; read the coverage table before the score.
What you seeWhat you see: a Health Index for each entity, findings linked to sources, and the sources not checked.
Set a schedule and a reader
Create a monitoring project with the names, specialities and nearby localities as keywords and the namesakes as exclusions. Assign a practice manager as analyst and the practitioner or owner as approver.
What you seeWhat you see: a project card with the next run and credit status.
Turn a review or report into a case
When a review needs a reply or an article gets a procedure wrong, convert the mention into a case and capture the page: Spy Monk fetches an HTML snapshot and hashes it. You add the internal record — never the patient file itself.
What you seeWhat you see: the case timeline, the evidence list and a reply draft.
Approve within the rules
The practitioner or an admin reviews the reply or correction request against confidentiality and the NMC guidelines, then records an approval. Only then is it posted or sent, through the platform's or publisher's own channel.
What you seeWhat you see: the approval record with name, time and note.
Track outcomes and trends
Record the platform's or publisher's decision. Over months, the Health Index trend and the case outcomes in Reports show whether the picture is improving within covered sources.
What you seeWhat you see: trends that carry their coverage with them.
Regulatory notes
Rules a clinic should know before replying
- NMC Guidelines on Ethical Advertising and Public Communication by hospitals/medical institutions and RMPs — effective on publication1
- 6 Oct 2026
- RMPs shall not request or share patient testimonials, recommendations, endorsements or reviews for professional promotion on social media1
- Expl. V
- Manipulating reviews, ratings, followers or search rankings is prohibited1
- cl. 8.1(xii)
- Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002 — soliciting patients and advertising restricted2
- Reg. 6.1
Sources
- NMC Guidelines on Ethical Advertising and Public Communication (public notice, 6 October 2026) (opens in a new tab). National Medical Commission (copy hosted by Medical Dialogues) · Official text, checked 8 November 2026 · Signed notice hosted by a publisher; confirm on nmc.org.in.
- Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002 (opens in a new tab). National Medical Commission · Official text, checked 8 November 2026 · Cited through the NMC notice above; the regulations page could not be retrieved when checked.
Summarised from the published texts for orientation; not legal or professional-conduct advice. Hospitals are additionally governed by the Clinical Establishments Act and State Acts. Consult a qualified professional.
What you need to provide
Setting up a clinic workspace
- Names and registration details for each practitioner, the clinic's trading name and any former names, with Hindi or regional spellings.
- Authorisation. The practitioner must be the account holder or must authorise the clinic to monitor their name. A multi-doctor hospital uses one workspace with an entity per practitioner.
- A private channel for patients: a phone line or email named in every reply.
- A confidentiality rule for replies, agreed in advance: no confirmation of patient status, no treatment details, no billing details in public.
- Roles. Practice manager as analyst; practitioner or owner as approver; your lawyer as viewer when a matter escalates.
- Your professional body's current rules. Keep a copy of the NMC guidelines in the case notes; dental, AYUSH and allied practitioners should check their own councils' rules.
Availability
Feature status for clinics, matched to the Phase 1 scope
- Audit and monitoring of practitioner and clinic names across news, search and videoAvailable nowSearch and video where the provider is enabled
- Review, news, video, impersonation, privacy and blackmail case typesAvailable now
- Review clarification template (English and Hindi), confidentiality-safe; approval gateAvailable now
- Evidence with SHA-256 fingerprints; PDF reports with coverageAvailable now
- Google Business Profile review connectorPhase 2
- Health-platform and directory listing connectorsPending feasibilityDepends on each platform's API and permissions
- Patient-record matching for review verificationPending feasibilitySRS §7, Phase 3; would need DPDP-compliant consent design
- Review generation or display widgetsPending feasibilityNot planned for clinics: NMC guidelines prohibit soliciting or sharing reviews for promotion
- Available now
- Available now4 items
- Phase 2
- Phase 21 item
- Pending feasibility
- Pending feasibility3 items
Questions
Doctors and clinics — frequently asked
A patient left a one-star review with details of their treatment. Can I reply with what actually happened?
No. Confidentiality applies even when the patient has disclosed details themselves. Reply briefly: thank them, say you take the concern seriously, and invite them to contact the clinic directly with a reference. Do not confirm they were a patient or discuss treatment or billing in public. Spy Monk's review clarification template (English and Hindi) is written for exactly this.
Can we ask happy patients to post Google reviews?
The NMC's October 2026 guidelines state that practitioners shall not request or share patient testimonials, recommendations, endorsements or reviews for professional promotion, and prohibit manipulating ratings. Spy Monk has no review-solicitation feature and we advise clinics against collecting reviews. Where a hospital's marketing department is involved, it should take its own professional advice.
A review is not from any patient we have seen. Can it be removed?
Only the platform can remove it, and only if it breaks the platform's published rules — for example, a conflict of interest or content unrelated to a real visit. Absence from your records is not proof of anything. Preserve it, reply neutrally, and report it only with clear evidence. See Can a review be removed?.
Someone is offering online consultations in my name on Instagram. What now?
Preserve screenshots and the profile URL, then file the platform's impersonation report with your ID and registration proof. Impersonation of a medical practitioner can endanger patients; report it at cybercrime.gov.in as well. Under the IT Rules 2021 the platform must act on impersonation complaints within two hours. Spy Monk's impersonation case organises the evidence and tracks the result.
A news report misdescribed a procedure performed at our hospital. Can Spy Monk get it corrected?
Spy Monk cannot force a correction, but it helps you prepare a specific, documented request: the exact statement, the clinical or factual record that contradicts it, and the correction you seek, sent through the publisher's channel after approval. The Press Council's norms expect publishers to correct inaccuracies with due prominence. See News and media fact-verification.
Is a patient's review personal data we must protect?
A public review contains the reviewer's own words published by them; your internal notes about the patient are personal data governed by the DPDP Act 2023 and medical confidentiality. Keep patient files out of Spy Monk cases: record internal references, not clinical details. How the DPDP Act applies to a clinic's monitoring is a question for counsel, and the Trust Center sets out how Spy Monk treats third-party data.
Does Spy Monk work for a multi-doctor hospital?
Yes. One workspace holds an entity per practitioner and for the hospital itself (entity limits depend on plan), with roles so that department heads can read and approve while a central team manages cases. Hospitals should note that the NMC guidelines also bind hospitals' own advertising and communication.
See what patients and the press are saying — then respond within the rules
Run a free audit of the practitioner and the clinic. The coverage table tells you what was checked; the case tools keep every reply inside professional-conduct limits.
No card needed

