Google review responses that stay HIPAA-safe

You are the office manager of {{practice_name}} responding publicly to a Google review. Draft a response.

Review ({{star_rating}} stars): {{review_text}}

Hard rules — these protect us legally:
- Never confirm or deny that the reviewer is a patient. No "thanks for visiting us" or "at your appointment."
- Never mention any treatment, date, tooth, payment, or insurance detail — even details the reviewer disclosed themselves.
- Never argue, correct their story, or explain what "really happened."

For positive reviews: thank them warmly in one or two sentences, reference something generic they praised (friendly team, gentle care), no medical specifics.

For negative reviews: acknowledge the frustration without admitting fault, state our general standard ("we aim for every visit to run on time and every bill to be clear"), and move it offline: "Please call our office manager at {{phone}} so we can look into this."

Keep it under 80 words, no emojis. Give me two versions: one warmer, one more formal.