Searching and reviewing local businesses is easier with Yelp, an online directory and customer rating website for all types of businesses and services. However, its use by physical therapists may not adhere to HIPAA regulations.
Yelp is not HIPAA compliant because it will not sign a BAA; however, it can still be used if PHI is not transmitted.
Yelp is a popular online platform and mobile app that helps people discover and review local businesses, including restaurants, cafes, bars, shops, salons, and various services such as physical therapists, dentists, and more. It allows users to search for businesses in their area, read reviews and ratings from other users, view photos, and get information about hours of operation, location, contact details, and other relevant information.
Yelp also provides businesses a platform to create profiles, interact with customers through messaging and responding to reviews, and advertise their services through paid features. It has become a widely used tool for consumers to make informed decisions about where to spend their money and for businesses to manage their online reputation and attract new customers.
According to TechJury, 12% of US consumers use the platform regularly, putting the company in the 10th spot on the leading review-based networks. Yelp’s net revenue for the second quarter of 2023 was $337 million. Established in 2004, Yelp has delivered record-breaking figures for almost 20 years.
Any software or service that stores, processes, or transmits protected health information (PHI) on behalf of a healthcare entity is considered a business associate and should, therefore, sign a business associate agreement (BAA). Under the Health Insurance Portability and Accountability Act (HIPAA), a BAA outlines the responsibilities of third-party vendors that handle PHI.
Jeremy Stoppelman, Yelp founder, created the company when he found that the internet did not help answer the question, “How do you find a great doctor online?” Jeremy built the platform to make it possible for people to share and find reviews of doctors. This suggests that healthcare organizations, including physical therapists, can actively seek and maintain patients to have a successful business using Yelp. However, Yelp does not sign BAAs with healthcare providers because it is a consumer review platform and is not designed to handle PHI in compliance with HIPAA regulations.
Read more: What does it mean to be a business associate?
Beyond HIPAA, therapists should consider several ethical concerns before advocating for reviews on Yelp. Ethical concerns surrounding online reviews revolve around issues such as authenticity, bias, and manipulation:
Physical therapists can use Yelp ethically and adhere to HIPAA by focusing on general aspects of their practice rather than specific patient information. Here are some ways they can utilize Yelp effectively:
Related: What is the key to HIPAA compliance?
A major part of HIPAA compliance is ensuring a business associate will sign a BAA. However, Yelp’s lack of a BAA suggests that Yelp is not HIPAA compliant.
Using the site is still acceptable for therapists, but they need to ensure that any PHI transmission through the platform does not occur to comply with regulations.
Related: Understanding and implementing HIPAA rules
How does Yelp work?
Users can search for businesses in their area, read reviews and ratings from other users, view photos, and get information about hours of operation, location, contact details, and other relevant details.
Can healthcare providers use Yelp to communicate with patients?
Healthcare providers should avoid using Yelp or similar platforms to communicate with patients about their health information or treatment. These platforms are not equipped to meet the stringent security and privacy standards required by HIPAA. Instead, healthcare providers should use HIPAA compliant methods of communication, such as encrypted email.
Learn more: HIPAA compliant email: The definitive guide
What should healthcare providers do if they receive a review on Yelp that mentions patient information?
If a review on Yelp contains patient-specific information, healthcare providers should refrain from responding publicly and should instead reach out to the reviewer privately to address the issue. It's important to handle patient information with care and always protect patient privacy.