Should customers leave reviews on a shared device at your business?
A business wants more reviews.
It puts a tablet near reception and asks customers to sign in and leave a Google review before they go.
At first glance, that sounds convenient.
But the device is owned by the business, used by many people and may require customers to sign into personal Google Accounts.
That creates a different set of questions from simply giving someone a QR code.
The useful question is not:
Can we physically open Google Reviews on a shared tablet?
It is:
Should customers be asked to sign into their own accounts and publish reviews from a device controlled by the business?
Short answer
Usually, no.
Google does not publish a special Business Profile rule saying that every shared review terminal is automatically prohibited.
But Google does require reviews to reflect genuine experiences, and customers must be signed into their own Google Account to leave a Google review.
Google Account Help also recommends using a private browsing window when signing in on a device that is not yours, so that other users cannot later access the account or see activity.
That means a shared review terminal creates avoidable risks:
- a customer may remain signed in;
- another person may access the previous user’s account;
- browser autofill or saved credentials may expose information;
- the business appears to control the review environment;
- staff may accidentally influence which customers are invited or what they write;
- multiple reviews from one business-controlled device can create an unnecessary integrity concern even when the customers are real.
A review link or QR code opened on the customer’s own device is usually the cleaner option.
Does Google explicitly ban a shared review tablet?
The official sources reviewed for this article do not state a universal rule that says:
“Customers may never leave Google reviews from a shared device.”
Do not invent that policy.
Google’s published rules focus on other things:
- reviews must reflect genuine experiences;
- incentives for posting, changing or removing reviews are prohibited;
- customers need to be signed into a Google Account to leave a review;
- businesses can share a review link or QR code.
So the recommendation against a shared terminal is primarily a privacy, account-security and review-integrity recommendation.
It is not presented here as a separate Google prohibition.
Why does account sign-in matter?
Google says customers must be signed into a Google Account to leave a review.
On a customer’s own phone, that usually happens inside their own browser or Maps environment.
On a shared business-owned tablet, the customer may need to:
- enter their Google Account email;
- enter a password;
- possibly complete two-step verification;
- publish the review;
- sign out fully.
Every extra account step happens on equipment the customer does not control.
That is not a good default experience for many businesses.
What does Google recommend for devices that are not yours?
Google Account Help says that if you sign in temporarily on a computer, phone or tablet that does not belong to you, use a private browsing window.
Google gives examples such as:
- public computers;
- borrowed devices;
- shared devices.
The reason is straightforward: when the session ends, other people should not be able to use the account or see activity.
That guidance is about account security, not review policy.
But it is directly relevant when a business asks customers to sign into Google on a shared terminal.
What privacy problems can a shared device create?
Potential problems include:
- the previous user remains signed in;
- browser history exposes account activity;
- cookies keep the session active;
- autofill remembers personal information;
- saved passwords are offered by the browser;
- a notification appears while another person is using the device;
- staff can see more of the customer’s account than intended.
The business may not intend any of that.
But the risk exists because multiple people are authenticating to personal accounts on one device.
Could the business avoid that by using private browsing?
Private browsing reduces some session-retention risk.
It does not solve every problem.
The business still needs to make sure:
- every session starts fresh;
- every private window is closed;
- no screenshots or screen recordings are active;
- staff are not standing over the customer;
- the customer understands they can review later on their own device;
- the process does not pressure the customer.
At that point, the shared terminal may be more complicated than simply giving the customer a QR code.
Why is a QR code usually better?
Google itself provides a Business Profile review link and QR code.
Google suggests placing the QR code in the store or sharing the link through receipts, email, WhatsApp or other customer communication.
With a QR code, the customer can:
- use their own phone;
- stay inside their own account environment;
- write the review later;
- leave without handing credentials to a business-controlled device.
The business still needs to follow review policies.
But the account-security problem becomes much smaller.
Can the business help the customer find the review page?
Yes.
A staff member can point the customer to:
- the official review link;
- the official review QR code;
- the Business Profile.
That is different from taking control of the customer’s device or account.
The customer should write and submit the review themselves.
Should staff stand beside the customer while they write?
Usually, avoid it.
Even without an explicit platform rule about physical distance, staff presence can create pressure.
A customer may feel that:
- a positive review is expected;
- criticism is unwelcome;
- the employee is watching the rating;
- service depends on the review.
That is a poor review environment.
A genuine review should reflect the customer’s own experience.
Give the customer space.
Can you ask only satisfied customers to use the terminal?
Do not use a shared device as a review-gating mechanism.
Google’s fake-engagement policies are designed to prevent manipulated or misleading review activity.
A business should not create a process where:
- happy customers are directed to Google;
- unhappy customers are diverted elsewhere;
- staff decide who is “safe” to invite.
The device is not the main problem.
Selective solicitation and manipulation are.
Can you offer a discount for using the device?
No.
Google says incentives such as free or discounted goods or services in exchange for reviews are prohibited.
That applies whether the review is submitted:
- on the customer’s phone;
- through a QR code;
- from a shared tablet.
The collection method does not make an incentive acceptable.
What if the device never asks for a password?
The customer may already have a signed-in Google session.
That does not remove the need for privacy controls.
If multiple people use the device, the business must make sure one person’s account is not available to the next.
Do not assume that “no password was typed” means no private account data is present.
What if the business uses a kiosk mode?
A locked-down kiosk can reduce some device risks.
But the core questions remain:
- does the customer need to authenticate personally?
- is the session fully isolated?
- can another customer access it?
- does the setup create pressure?
- is there a simpler personal-device route?
A kiosk can be technically secure and still be an unnecessary review-collection design.
Does using one device make the reviews fake?
Not automatically.
A genuine customer can leave a genuine review from a shared device.
Do not claim that device reuse alone proves fake engagement.
The concern is that a business-controlled shared device creates more privacy and integrity risk than necessary.
If Google removes or delays a review, do not assume the device was automatically the reason unless Google gives that explanation.
What should a business do instead?
Use a low-friction request.
For example:
- create the official Google review link or QR code;
- display it where customers can choose to use it;
- let customers open it on their own device;
- do not offer incentives;
- do not screen customers by sentiment;
- do not dictate the wording;
- do not require the review before completing service.
That gives the customer more control.
What if some customers do not have smartphones?
Do not turn that into pressure to sign into a business device.
Alternative options can include:
- send the review link by email;
- send it by message if the customer asks;
- print the URL or QR code on a receipt;
- let the customer leave the review later.
A customer who cannot or does not want to review immediately should be able to leave without friction.
What should a business owner check before using a shared review device?
Ask:
- Does the customer have to sign into a personal Google Account?
- Can the previous user’s session remain available?
- Is private browsing enforced?
- Can staff see the rating or text before submission?
- Are only certain customers invited?
- Is any reward tied to the review?
- Can the customer easily choose their own device instead?
- Is the terminal solving a real customer problem or only making reviews easier for the business?
If the main benefit is convenience for the business, the QR-code route is usually cleaner.
FAQ
Does Google ban customers from reviewing on a shared device?
The official Google sources reviewed for this article do not state a universal ban on shared review devices. The concerns are privacy, account security, genuine-review integrity and avoiding manipulative collection practices.
Does a customer need a Google Account to leave a review?
Yes. Google says customers must be signed into a Google Account to leave a review.
Is it safer to use a QR code?
Usually, yes. Google provides a review QR code and link, allowing customers to use their own device and account environment.
Can staff help customers write the review?
Staff can help customers find the review page. They should not dictate the rating or wording, pressure the customer, or submit the review for them.
Can we offer a small reward for leaving a review?
No. Google prohibits incentives such as free or discounted goods or services in exchange for posting, changing or removing reviews.
Does one shared IP address automatically make reviews invalid?
Google does not publish a rule stating that reviews are automatically invalid merely because they came from one network or device. Do not invent that threshold.