Providers are very restricted in what they can say in their review responses due to privacy regulations. They cannot correct a patient's story or provide details of the encounter, as doing so would disclose Protected Health Information (PHI). Even confirming the patient/provider relationship can be considered a disclosure of PHI. While patients may share specific details about their health encounters in their reviews, providers must ensure their responses do not violate privacy laws by revealing any personal health information.