Texting patients is the new phone — done responsibly
Most chiropractic patients prefer text over phone. That preference creates an enormous opportunity and a real compliance question: how do you text patients about visits, plans, and recall without putting PHI on a carrier network you don’t control?
What “HIPAA-aware” means here
It does not mean every SMS becomes encrypted end-to-end on the carrier network — that’s not how SMS works. It means the snapshot is designed so that PHI never travels in plain SMS:
- Identifiers stay generic. “Reminder for your appointment tomorrow at 2 PM” — not “Reminder for your sciatica re-eval tomorrow at 2 PM.”
- Sensitive content stays in the portal. “Your home-care instructions are ready: tap here to view” — not the instructions themselves in the message body.
- Consent is captured before the first send. Every patient confirms SMS opt-in at intake, with timestamp + IP logged.
- STOP and HELP keywords are honored automatically.
What the front desk experiences
A normal-looking GHL inbox: patient texts come in, front desk replies, conversations are threaded by patient. Behind the scenes, every outbound template is pre-checked against the PHI rules — staff can’t accidentally send “Your blood-pressure note from last visit was…” because that template doesn’t exist.
TCPA + A2P 10DLC
- TCPA consent captured at intake with appropriate language, frequency disclosure, and STOP/HELP info
- A2P 10DLC registration filed by our team during setup (free, for US clinics) — without this, texts from your business number get filtered as spam
- Quiet hours respected (no SMS sent outside the patient’s local 8 AM – 8 PM window)
- Unsubscribe + re-subscribe logic baked in
What it integrates with
- GHL’s native SMS + Twilio backend
- WhatsApp QR integration (the bonus tool) for international patients or clinics that prefer WhatsApp
- Your EHR (visit-context flows into the SMS template — “your follow-up with Dr. Smith is tomorrow”)
What it does NOT replace
This is not a BAA-covered messaging platform substitute. If you need full PHI-in-message capability for clinical reasons, you’ll need a separate secure-messaging app (TigerConnect, OhMD, etc.). The snapshot covers ~95% of front-desk-to-patient communication scenarios without requiring that.
Setup
Day 1: SMS templates installed, branded to your voice. Day 2: A2P 10DLC submission filed, opt-in language wired into intake. Days 3–15: 10 dedicated hours — custom template additions, integration with your EHR for visit-context, quiet-hours rules per location.
A real example
Lapsed-patient SMS: “Hi {{firstName}} — Dr. Patel and the team miss seeing you! Tap here to grab a quick spot on this week’s schedule: {{bookingLink}}. Reply STOP to opt out.”
No PHI. No diagnosis. No treatment reference. Warm. Specific. Compliant.
Book a demo → and we’ll show you the full template library + the consent capture flow.