SMS for Healthcare: The HIPAA-Compliant Texting Playbook for Medical Practices

A patient calls three times before anyone calls back, then books with the practice down the street. Here's the HIPAA-compliant texting system that keeps patients on the schedule, cuts no-shows, and never puts protected health information at risk.

Problem: patients go quiet, and compliance worry keeps you from fixing it

A patient tries to reach the front desk between calls, gets voicemail twice, and gives up. The next day they book with a different practice, one that happened to text back first. Meanwhile your team is still calling every patient by hand to confirm tomorrow's schedule, because nobody was sure texting patients was even allowed.

This is the same speed to lead problem every business with inbound patient inquiries faces, except in healthcare it comes wrapped in a real compliance question on top of the speed one. Whether you run a family medical practice, a dental office, an urgent care clinic, a telehealth service, or a behavioral health practice, the hesitation is the same: is texting patients even HIPAA compliant, and if it is, how do we actually set it up without exposing protected health information? The good news is both problems have the same fix, and it's simpler than most practices assume.

Solution: HIPAA-compliant texting that cuts no-shows and staff hours

A compliant, automated first response and reminder system closes the gap on both fronts at once. The data backs this up clearly.

SMS gets opened 98% of the time, versus 22% for email. Click-through on a text with a link runs 45%, versus under 5% for email. And 57% of businesses now respond to a new inquiry within 30 minutes, according to the 2026 State of SMS Benchmark Report. That's the bar a modern practice needs to clear, patients calling around for care don't wait any longer than a homeowner with a leak does.

[Chart placeholder, pending design: SMS vs. email open and click-through rates. Draft alt text: "Chart comparing SMS and email open and reply rates."]

The part that's specific to healthcare: none of this requires the practice to take on the compliance risk itself. A texting platform built for this handles the safeguards, the practice just needs to set it up correctly from day one.

Your SMS toolkit: what you need before you text a single patient

None of this requires a developer or a new phone system, but it does require getting the compliance piece right before anything else.

1. HIPAA compliance and a signed BAA. This is the one item Contractors and other service-industry playbooks didn't need. Before any message could include protected health information, the practice needs a signed Business Associate Agreement in place. Salesmsg supports HIPAA-compliant texting, with a BAA, an audit trail, and access controls built in, but the practice still owns its own compliance program on top of that.

2. A text-enabled business number. If patients already call this number, it should also be able to text. Most numbers can be enabled for two-way business texting in minutes, no new number required.

3. Your CRM connected. Salesmsg integrates natively with HubSpot and Salesforce. Worth being direct here: this connects to your CRM, not directly to a practice management or EHR system. For practices that want a deeper bridge into their healthcare-specific stack, the Keragon integration connects Salesmsg to 300+ healthcare apps through HIPAA-compliant, no-code automation.

4. 10DLC and TCPA registration. The standard carrier compliance step every U.S. business texting from a 10-digit number needs to complete. Salesmsg walks the practice through it during setup.

5. A scheduling link. Connect Calendly so a patient can book or reschedule an appointment straight from a text, no phone tag required.

6. An AI agent for after-hours coverage. Set up an AI agent to catch appointment requests and general questions that come in overnight or on weekends, when most practices have nobody watching the phone.

Not sure which plan covers all of this? Check the pricing page for what's included at each tier.

How to build the first-response automation

This is SMS marketing automation applied to a practice's day-to-day, with compliance built into every step rather than bolted on.

Step 1: Turn on missed call text back. Anyone whose call goes unanswered gets an automatic text within seconds. Something as simple as "Hi, sorry we missed your call, this is [Practice Name]. What can we help with?" keeps the patient from calling the next practice on their list.

Step 2: Set up an auto-response for new patient inquiries. When a new inquiry comes in through a web form or call, the first text should go out inside 5 minutes if automated, and inside 30 minutes at the latest if a person is sending it. Use the First Response templates below.

Step 3: Build a follow-up sequence, not just one message. 42% of all replies come from a follow-up message, not the first text. If the sequence stops after one message, the practice is leaving nearly half its responses on the table. The optimal sequence length is 4 to 7 messages spaced out over a few days. Need more follow-up ideas beyond what's below? See our follow-up text message examples.

Step 4: Time messages for the window that actually gets replies. 10am to 12pm produces the fastest replies. And shorter wins: messages under 100 characters get a 68% response rate, while messages over 500 characters drop to 31%. Every template below is written short on purpose.

25 SMS templates for healthcare, organized by patient stage

Turning a new inquiry into a scheduled, returning patient runs through six stages: Capture, First Response, Qualify/Intake, Book, Show Up, and Close the Loop. Use whichever section below matches the practice's weakest point right now.

For general-purpose texting beyond healthcare, see our canned response templates.

Capture

Web form auto-response

Hi [First Name], thanks for reaching out to [Practice Name]. This is [Staff Name]. Quick question so I can help faster: is this for a new patient visit, or are you an existing patient?

Missed call text back

Hi, this is [Practice Name], sorry we missed your call! What can we help with, and when's a good time to call you back?

QR code scan (waiting room flyer, exam room card)

Thanks for scanning! This is [Staff Name] from [Practice Name]. What can we help you with today?

Ad click-to-text

Hi, saw you clicked through on our [service] ad. This is [Staff Name] from [Practice Name]. What's going on, and how can we help?

First response

New patient inquiry, business hours

Hi [First Name], this is [Staff Name] with [Practice Name]. Got your message about [service]. Are you a new or existing patient with us?

New patient inquiry, after hours

Hi [First Name], got your message about [service]. This is our after-hours line, but I wanted to reach out so you're not sitting on it. Someone will follow up first thing tomorrow at [time]. Anything urgent I should flag?

Same-day or urgent request

Hi [First Name], got your message about [issue]. This is [Staff Name] with [Practice Name], we can likely fit you in today. What time works best, and how are you feeling right now?

Qualify/intake

Insurance check

Great, let's get you booked. Which insurance do you have, so I can confirm we're in network before your visit?

New vs. returning patient

Got it. Have you visited [Practice Name] before, or would this be your first appointment with us?

Reason for visit

To help the doctor prepare, what's the main reason for the visit? A quick sentence is plenty.

Intake form reminder

Here's your new patient intake form, takes about 5 minutes: [link]. Filling it out ahead of time means less waiting at the office.

Book

Offer appointment times

Based on what you've shared, I've got [day] at [time] or [day] at [time] open, either work?

Send a scheduling link

Here's our scheduling link so you can grab whatever time works: [link]. Takes about 30 seconds and you'll get a confirmation right away.

Confirm in-network before booking

Good news, we're in network with [insurance]. Want me to go ahead and get you on the schedule for [day/time]?

Waitlist or cancellation fill

We just had a [day] at [time] open up. You're on our waitlist, want that slot? First to reply gets it.

Show up

24-hour confirmation

Just confirming your appointment at [Practice Name] tomorrow at [time]. Reply YES to confirm or let me know if you need to reschedule.

2-hour reminder

See you soon! Your appointment with [Practice Name] is in about 2 hours, at [time].

Day-of directions

Quick note before your visit: we're located at [address], parking is [details]. See you at [time].

Missed appointment recovery

Hi [First Name], we had you down for [time] today and didn't want to just let it go unnoticed. Want to grab a new time? Reply here or book directly: [link].

Close the loop

Post-visit check-in

Hi [First Name], hope you're doing well after yesterday's visit. Any questions about [treatment/next steps]?

Prescription or next-steps follow-up

Quick follow-up: were you able to pick up your prescription okay? Let us know if anything's unclear.

Review request

Glad we could help. If you have a minute, a quick review means a lot to our practice: [link]. Takes about 30 seconds.

Referral ask

One quick ask, if you know anyone looking for a [specialty] provider, we'd love the introduction.

Recall or preventive care reminder

Hi [First Name], it's about time for your [annual checkup/cleaning/screening]. Want me to get you on the schedule before it fills up?

Chronic condition check-in

Hi [First Name], checking in on how [condition] has been since your last visit. Anything we should know before your next appointment?

The pushback playbook: 15 objection scripts for healthcare

Most healthcare objections aren't really about texting itself, they're about trust and compliance. Acknowledge the concern directly, then give a specific answer instead of a vague reassurance.

Compliance and security objections

Is texting patients even legal?
Yes, as long as the platform is HIPAA compliant and the practice has a signed BAA in place. That's exactly what we have set up.

What about HIPAA?
Salesmsg supports HIPAA-compliant texting with a signed BAA, an audit trail, and access controls. Happy to walk through exactly what that covers.

Do you have a signed BAA?
Yes, Salesmsg provides one. That's what makes it safe to include protected health information in a text when needed.

What if a patient's phone gets lost or stolen, is our data safe?
The message history stays with the platform, not just the device, and access is controlled and logged. Want me to show you how the audit trail works?

Trust and unfamiliarity objections

I've never heard of Salesmsg.
Fair, here's more on how the HIPAA-compliant texting setup works: [link]. Happy to walk through it live too.

How do I know our staff won't accidentally send PHI to the wrong number?
Every conversation is tied to a verified contact record in the CRM, so messages go to the right patient thread, not a loose number.

Are you actually secure, or just claiming to be?
Happy to share the specifics on encryption, access controls, and the BAA itself so your compliance officer can review it directly.

Cost and insurance objections

We don't have budget for another tool.
Totally get it. Most practices see this pay for itself through fewer no-shows alone. Want me to run the numbers for your patient volume?

Will this cost the practice more than it saves?
Reminders alone tend to cut no-shows meaningfully, which is usually the bigger cost. Want to see a rough breakdown based on your schedule?

Does insurance or Medicare require anything special for texting?
No special insurance requirement, this is a HIPAA compliance question, not a billing one, and that's already covered.

Timing and patient hesitation objections

Our patients are older, they won't text back.
Worth testing on a small group first. Most practices are surprised how many patients across age groups prefer a quick text to a phone call.

We already call to remind patients, isn't that enough?
Calls work, but texts get read faster and don't rely on someone picking up. Most practices run both together rather than replacing calls entirely.

I don't want to bother patients with more messages.
Totally fair, we can start with just appointment reminders, the highest-value message, and expand from there if it's working.

Objections that hide the real issue

Can we just keep doing what we're doing?
Sure, no pressure. Just worth knowing what a fast, compliant text-back system tends to fix for practices your size, in case the no-show or phone-tag problem comes up again.

Our front desk is already busy, who's going to manage this?
Most of it runs on autopilot once it's set up, reminders and confirmations especially. Front desk only steps in for the conversations that actually need a person.

Why SMS works for healthcare

By adding SMS at every one of these six stages, practices reach patients where they already are, their phone, not a voicemail box.

✅ Immediate visibility: 98% of texts get opened, and 90% get read within 3 minutes.
✅ Fewer no-shows: Automated reminders sent a day before and a couple hours before an appointment typically cut no-shows by 20 to 30%, the same effect seen across appointment-based industries.
✅ Less phone tag: Confirmations, reschedules, and intake reminders happen without anyone picking up the phone.

[Chart placeholder, pending design: AI agent response time vs. human rep. Draft alt text: "Chart comparing AI agent and human response time and lift in response rate."]

Once the basics are running, the next gain comes from AI agents. Salesmsg's AI agents respond to inbound messages in under 60 seconds, compared to roughly 15 minutes for a human staff member, an 88% lift in response rate. That means after-hours and overflow inquiries get a real first response even when the front desk is off the clock.

Your 30-day rollout plan

Week 1: Get compliant, then enable your number. Confirm the signed BAA is in place, then get the existing business number text-enabled.

Week 2: Turn on one automation and load the intake templates. Set up missed call text back or a new-inquiry auto-response, then load the Qualify/Intake templates as saved messages staff can send in one tap.

Week 3: Turn on appointment reminders. Every booked appointment gets a 24-hour reminder and a 2-hour reminder.

Week 4: Add recall and review requests. Load the Close the Loop templates as triggers after each visit.

Most practices get the bulk of the value from these first four weeks. After that, add an AI agent for after-hours and overflow coverage.

FAQ

Is it HIPAA compliant to text patients?
Yes, with a signed Business Associate Agreement and the right safeguards in place. Salesmsg supports HIPAA-compliant texting, but the practice is still responsible for its own compliance program. For more on staying compliant, see our SMS marketing best practices guide.

Do I need a signed BAA to text patients?
Yes, if any message could include protected health information. Salesmsg provides a BAA for practices that need one.

What's the difference between compliant texting and standard SMS?
Compliant texting adds an audit trail, access controls, and safeguards around any protected health information in a message, on top of standard two-way SMS.

How fast should a practice respond to a new patient inquiry?
As close to immediately as possible. An automated first response within minutes, followed by a human reply the same business day, keeps new patients from calling the next practice on their list.

Can SMS actually reduce appointment no-shows?
Yes. Automated reminders sent a day before and a couple hours before an appointment are one of the simplest ways to cut down on missed visits.

Does Salesmsg integrate with my practice management or EHR system?
Salesmsg integrates natively with HubSpot and Salesforce. For practices that need to connect a wider set of healthcare-specific tools, the Keragon integration bridges 300+ healthcare apps with HIPAA-compliant automation.

Do patients have to opt in before I can text them?
Yes. Practices need explicit consent before sending texts, and Salesmsg handles the carrier registration and compliance language that goes along with it.