Therapist Testimonials: What Therapy and Counseling Practices Can Publish

Nearly every article on this topic quotes one code and implies it covers everyone. It does not. A psychologist, a licensed professional counselor and a clinical social worker working in the same building are governed by three different sentences, and the differences are not cosmetic. Here is what each one says, taken from the codes themselves.

Two practical consequences follow. First, advice written for psychologists is unsafe for counselors, because ACA extends the prohibition to former clients and APA does not. If you are an LPC or LMHC, the common suggestion to wait until termination and then ask does not work for you. Second, the NASW wording closes a door the other two leave ajar, and it is the one clinicians most often walk through.

The scenario is universal. A client sends an unprompted message at the end of treatment saying the work changed their life. It is genuine, you did not fish for it, and it would make a wonderful quote on your website. So you write back and ask whether you may use it.

For a social worker, that request is the violation. NASW 4.07(b) prohibits solicitation of testimonial endorsements and then defines the term to include, in its own parenthetical, solicitation of consent to use a client prior statement as a testimonial endorsement. The unsolicited part protects the original message. It does not protect the ask that follows.

The reasoning holds up outside social work too, which is why it is worth understanding rather than just obeying. The concern in every one of these codes is the power differential, not the wording of the request. A client who has trusted you with their worst weeks is not positioned to say no to you comfortably, and a polite refusal costs them something a customer refusing a software vendor never pays. That is what vulnerable to undue influence means in practice. It is also why a request made after termination is not automatically clean: the relationship that created the imbalance does not end when the file closes.

The workable version, where your code allows any version at all, is to remove yourself from the ask entirely. Consent captured through a form the client reaches on their own, with no follow up from you and no consequence for ignoring it, is a materially different act from a personal email from their therapist. It does not make ACA C.3.b disappear for a counselor, and it does not make the NASW parenthetical disappear for a social worker. Check it with your board before you rely on it.

Ethics codes are enforced by boards and associations. HIPAA is enforced by the Office for Civil Rights with money, and a private practice that bills insurance is generally a covered entity. Two separate obligations apply.

Publishing a client statement is a marketing use of protected health information. Under 45 CFR 164.508 that requires a written authorization, which is a specific document with six core elements and three required statements, not a consent checkbox and not a line in your intake paperwork. Missing any one element makes the authorization defective, and a defective authorization is the same as none. There is a full walkthrough of the required elements in our guide to the patient testimonial consent form.

Replying to a review can be the disclosure, on its own. This is the part clinicians underestimate. Confirming that someone was a patient is protected health information even when you disclose nothing about their treatment, and a defensive reply that mentions attendance, diagnosis or fees is worse. In 2023 OCR settled with Manasa Health Center, a New Jersey adult and child psychiatric practice, for $30,000 plus a corrective action plan after a complaint about a reply to a negative online review. The investigation found the protected health information of four patients had been impermissibly disclosed in responses to negative Google reviews. A psychiatric practice, ordinary review replies, four patients, thirty thousand dollars.

The safe response to a negative review is a generic one that confirms nothing: a statement of your privacy obligations and an offline contact route, with no acknowledgment that the reviewer is or was a client. Practices in adjacent regulated fields face the same structural problem, and the pattern is the same one we cover for patient testimonials and for financial advisor testimonials under the SEC marketing rule.

Read together, the codes restrict testimonials from people in a therapy relationship with you. They do not restrict proof as a category. Most private practices have a usable supply of it and never touch it, because they assumed the whole subject was closed.

There is a second category worth naming: proof that is not a testimonial at all. Credentials, supervision hours, specific modality training, professional memberships, published writing, and a clear description of who you work well with all do the reassurance work a prospective client is actually looking for. A person choosing a therapist is not comparing vendors on satisfaction scores. They want to know you have treated their problem before and that you will be a reasonable human being in the room, and none of that requires another client to vouch for you.

If you do collect from the sources above, keep the audiences apart. A wall of supervisee feedback belongs on a supervision page, not on the page a person in crisis lands on, and mixing them makes both less credible. The mechanics are the same as any other practice: see collect testimonials for the request flow and testimonial form for the questions that produce a usable answer.

Two changes are worth tracking. The ACA has signalled a new edition of its Code of Ethics for adoption in September 2026, the first revision since 2014, with online practice and digital marketing among the areas under review. If you are a counselor, C.3.b is a provision to re read when that lands rather than assume carries over unchanged. Separately, state licensing boards write their own advertising rules, and several are stricter than the national codes they otherwise track. Your board, not your professional association, is who disciplines you.

The caveat we will not dress up: Testimonials is software, not a compliance service, and no tool can make a testimonial ethical. What this product does is narrow and practical. It captures a consent record with each submission and stores it, it renders whatever disclosure wording you need inline beside the quote rather than behind a link, and it keeps separate audiences on separate walls without charging you per widget. Deciding whether a given testimonial may be published at all is your professional judgment and your board understanding of it. Run your plan past your licensing board and your malpractice carrier before you publish, especially if you hold more than one license and therefore sit under more than one of the codes above.