Your IT Provider Has Five-Star Reviews. What Do They Actually Prove?
Keep up with IT Club
Add IT Club as a preferred source in Google Search.
Modern customer-feedback systems can measure sentiment, invite happy customers to leave public reviews and route concerns into private follow-up. This buyer-side guide explains what public reviews can show, what they cannot prove and what to check before choosing an IT provider.
You are choosing an IT provider. Provider A has a 4.9-star rating from 200 reviews. Provider B has 4.6 stars from 48. Most buyers will favour Provider A immediately.
That instinct is understandable. Reviews are useful evidence, especially when they describe a real project, a difficult incident or a long working relationship. But the number beside the stars is not a complete due-diligence process.
Modern customer-feedback systems can ask customers how they feel, identify promoters and detractors, invite selected customers to leave a public review and alert the provider when somebody is unhappy. That can be good customer-experience management. It can help a provider find problems and give satisfied customers an easy way to share an honest experience.
Genuine reviews are not necessarily a representative sample. A public rating tells you what reviewers chose to say publicly, not automatically what every customer thinks.
The quick answer
Do not ignore a strong review profile. Use it as one signal, then test it against the provider's behaviour, evidence and customer references.
- Read the detail behind the stars, not only the average.
- Check whether reviews are recent and whether the story is consistent.
- Look at criticism and the provider's response.
- Ask how reviews are collected and whether customers are invited selectively.
- Request a relevant reference and check qualifications, control and exit terms.
How the feedback workflow can work
A provider may send a customer a short satisfaction survey after a support interaction, project milestone or regular service review. One common approach is to use Net Promoter Score, or NPS, which asks how likely the customer is to recommend the business on a scale from 0 to 10.
| Group | Usual score | A possible service workflow |
|---|---|---|
| Promoters | 9 or 10 | Thank the customer, invite an honest public review or ask whether they would provide a reference. |
| Passives | 7 or 8 | Ask what would improve the experience and watch for a change in sentiment. |
| Detractors | 0 to 6 | Alert a manager, investigate the concern and try to recover the relationship. |
There is nothing inherently wrong with any of those actions. A provider should know when a customer is unhappy, and a satisfied customer should be able to share their experience without unnecessary friction.
The buyer-side issue appears when the public review route is mainly offered to the happiest group while less positive experiences stay inside the provider's private recovery process. The reviews can still be real. The public profile may simply be more positive than the provider's overall customer sentiment.
The selection-bias problem in plain English
Imagine 100 customers: 20 are delighted, 60 are broadly satisfied and 20 are unhappy. If the delighted customers are heavily encouraged to leave public reviews while unhappy customers are routed to private follow-up, the public sample will over-represent the delighted group.
That is selection bias. It does not mean the people who reviewed the provider were pretending. It means the people who left reviews may not be a random cross-section of all customers.
This is why you should not overcorrect and conclude that review requests are dishonest. A good provider should ask for feedback, investigate dissatisfaction and encourage genuine reviews. The more useful question is: what can this review profile actually prove, and what remains unknown?
How to Read an IT Provider’s Reviews
Use this framework before you allow a star rating to dominate your shortlist.
| Check | What to look for | Why it matters |
|---|---|---|
| Volume | How many reviews are there, and how does that compare with the provider's age and apparent customer base? | A 5.0 rating from eight reviews means something different from 4.8 from 300. |
| Recency | Are reviews spread across the last year or mostly several years old? | Ownership, staff, systems, service models and prices can all change. |
| Distribution | Is there a mixture of ratings, or only a wall of five-star praise? | A range of experiences can reveal more context. A perfect rating is not automatically suspicious, but it deserves context. |
| Detail | Do reviewers describe projects, outages, communication, response times or problem-solving? | Specific experiences are more useful than repeated phrases such as “great company”. |
| Response | When a customer is critical, does the provider remain professional, investigate and try to resolve the issue? | How a provider handles a bad review may tell you more than another five-star one. |
| Consistency | Do independent reviewers repeatedly mention clear communication, reliable support or fast response? | Repeated themes strengthen a signal. Contradictory stories are a reason to ask more questions. |
| Independent evidence | Can the provider show qualifications, references, relevant case studies and current technical competence? | A public rating cannot demonstrate that the provider will operate your environment safely. |
A Google rating is a signal, not due diligence
Choosing an IT provider can mean entrusting another business with Microsoft 365, email, privileged accounts, backups, endpoint security, identity, network access, customer data and business continuity. That decision deserves more than “they had 4.9 stars”.
Google's Maps policy prohibits fake engagement, including discouraging or prohibiting negative reviews and selectively soliciting positive reviews from customers. UK consumer-protection rules also prohibit fake reviews and other misleading practices. Those rules matter, but they do not turn every targeted review invitation into a fake review. The safest conclusion is narrower: understand how the profile was assembled and do not treat it as a random survey of every customer.
Do not ignore the one-star reviews
Some negative reviews are unfair, emotional or unrelated to the service. One complaint may tell you very little. A repeated pattern deserves attention.
- Communication that stopped when the problem became difficult.
- Unexpected charges, unclear renewals or disputed billing.
- Slow response or unresolved recurring faults.
- Project overruns without clear ownership or explanation.
- Difficulty getting access, documentation or information back.
- Problems when the customer tried to change or end the relationship.
Read the provider's reply as well as the complaint. A professional response does not need to accept every allegation, but it should avoid public blame, protect confidential information and show that the concern can be investigated through a proper route.
Ask for a relevant reference
Ask: “Can I speak to a customer similar to us?” A relevant reference is often more useful than 100 unrelated anonymous reviews. Look for a similar size, sector, Microsoft 365 setup, compliance need or support model.
Ask the reference how the provider communicates during an outage, explains recommendations, handles a project that changes, documents the environment and responds when something goes wrong. Ask what the provider is good at and what they would want clarified before signing. The provider will need permission before sharing customer details, so a carefully arranged reference is normal.
Ask how the relationship works when you leave
A positive customer relationship should create value without creating avoidable dependency. Ask how long customers typically stay, why customers leave, what the notice period is and what offboarding includes.
Also ask who owns and administers your domains, Microsoft 365 tenant, backups, documentation, licences and security tools. You should know how to retain access and recover your information if the provider is unavailable or the relationship ends.
Read: Can You Move Microsoft 365 Away from Your Current Provider? →
Before signing, check the contract, exit assistance, data return, administrator roles, renewal terms and any charges for transition work. A five-star profile cannot answer those questions for you.
The 5-Minute Provider Check
Don’t outsource your judgement to a star rating.
- □ Read the five-star reviews and note whether they contain specific experiences.
- □ Read the worst reviews and the provider's replies.
- □ Check the dates and look for sudden bursts or long gaps.
- □ Look for repeated themes across different reviewers.
- □ Ask how the provider collects feedback and whether it invites selected customers to review.
- □ Check qualifications, certifications and relevant technical experience.
- □ Ask for a customer reference similar to your business.
- □ Review contract, renewal and exit terms.
- □ Ask who owns and administers your systems and data.
- □ Ask what happens if you leave or the provider becomes unavailable.
When the metric becomes the target
Customer feedback can also be tied to staff recognition or rewards. That can encourage good service. But any organisation should remember a simple measurement risk: when a metric becomes a target, people can start optimising the score instead of the underlying outcome.
This is not a claim that a particular provider or employee is doing that. It is a reason to look beyond the score. Does the provider fix recurring causes, explain service improvements and keep useful operational evidence, or does it mainly celebrate the number?
Read: Does Your Cyber Security Training Actually Work? →
The same principle applies to other supplier claims. A badge, rating or dashboard can be a useful starting signal, but it is not the outcome itself.
Commercial incentives deserve calm questions
A customer-feedback platform helps a provider understand sentiment and improve its reputation. A compliance service can help a customer meet a real requirement while creating a commercial opportunity for the provider. Neither is inherently wrong.
The buyer should still understand the incentives around the advice and signals being relied upon. Ask how a recommendation was reached, what evidence supports it, what alternatives exist and who benefits financially. A professional supplier relationship should survive intelligent scrutiny.
Read: When Your IT Provider Finds a Compliance Problem, Who Benefits From the Fix? →
Read: How Do You Prove Your Business Can Be Trusted? →
What a good provider should be comfortable answering
- How are your reviews collected?
- Do you invite selected customers to leave public reviews?
- Can I speak to a relevant customer?
- How do you handle complaints and recurring faults?
- How long do customers typically stay, and why do they leave?
- What happens during offboarding?
- Can you show relevant case studies and qualifications?
- Who owns and administers the systems we are placing in your care?
None of these questions should offend a good provider. The answers may be commercially sensitive, and a provider may not be able to disclose every customer or retention figure. It should still be able to explain its process, provide proportionate evidence and tell you what you will control.
Choosing an IT provider? Ask the IT Club Advisor. We can help you work out what questions to ask before you sign.
Reviews are evidence. They are not proof.
Five-star reviews can tell you that real customers chose to describe a positive experience publicly. They can help you find providers worth investigating. They do not automatically tell you how every customer feels, how complaints are handled, whether the provider is technically competent, whether recommendations are impartial or how the relationship behaves when it ends.
Read the stars. Then read the detail, the criticism, the contract and the evidence. A good IT provider should be able to survive intelligent scrutiny long after you stop looking at the stars.
Sources and further reading
The review-policy points in this article are based on current Google Maps and UK Competition and Markets Authority guidance. The NPS description follows the commonly used 0-to-10 classification. Research on online-review self-selection is included as context for why public reviews may not represent every customer.
Google Maps User-Generated Content Policy: Fake engagement →
CMA: Fake reviews guidance for businesses →
CMA: Reviews guidance for online review sites →
Qualtrics: Net Promoter Score methodology →
Information Systems Research: On self-selection biases in online product reviews →
Plain-English Takeaway
Reviews are evidence, not proof. Read the full pattern, ask for relevant references and check competence, ownership and exit terms before trusting an IT provider with your systems.
Frequently asked questions
Are five-star IT provider reviews proof that a provider is good?
No. They are useful evidence about the experiences reviewers chose to share publicly. They do not automatically show how every customer feels, how complaints are handled, whether the provider is technically competent or what happens when a customer leaves.
Is it wrong for an IT provider to ask happy customers for reviews?
No. Asking a genuine customer to share an honest experience can be a sensible part of customer feedback. The buyer-side question is whether the public review sample is being selected in a way that leaves you with an incomplete picture. Selective review invitations and fake reviews are not the same thing.
What do promoters, passives and detractors mean in NPS?
In the usual Net Promoter Score method, people giving 9 or 10 are promoters, 7 or 8 are passives and 0 to 6 are detractors. NPS is calculated from the percentages of promoters and detractors. It is one measure of sentiment, not a complete assessment of an IT provider.
How many reviews should an IT provider have before I choose them?
There is no useful universal minimum. Volume needs context: compare it with the provider's age, size, customer base and review dates. A smaller set of recent, detailed reviews and a relevant reference can tell you more than a large but generic rating count.
What should I ask an IT provider's customer reference?
Ask a customer with a similar size, sector, Microsoft 365 setup or compliance need how the provider communicates, handles incidents, explains costs, manages projects and supports offboarding. Providers need the customer's permission before sharing details, so expect references to be arranged carefully.
Related Articles
When Your IT Provider Finds a Compliance Problem, Who Benefits From the Fix?
Your IT provider finds six compliance gaps and can sell you six fixes. That is not automatically a problem — but it is a reason to ask what is required, what is recommended and who benefits from the decision.
Read articleCould Your Business Keep Running If Its Owner Died Tomorrow?
Death is the ultimate key-person test. This practical guide helps small businesses find the digital dependencies that could stop communication, money, customer delivery or recovery if an owner or key person became unavailable.
Read articleIs Your Website Actually Backed Up? Why a Cloud Website Still Needs a Recovery Plan
A website being hosted in the cloud does not automatically mean your business has an independent backup or a tested recovery plan. Learn what a useful website backup should protect, how GitHub can help, and what recovery questions to answer.
Read article