Patients open text messages within minutes. They open emails within hours. They check voicemails within days. For a medical practice trying to reach people quickly, the difference between the channels is the difference between connection and silence.
Text messaging has quietly become one of the most important communication channels for medical practices. Patients open text messages at rates dramatically higher than any other channel and within timeframes measured in minutes rather than hours or days. The same message sent by SMS produces meaningful patient engagement that the same content sent by email or left in voicemail simply does not produce.
The opportunity comes with constraints. SMS is governed by federal regulations, state-level rules, carrier policies, and platform-specific requirements that together make it more regulated than most other marketing channels. Practices deploying SMS without understanding these constraints frequently find themselves facing complaints, regulatory exposure, and platform-level consequences that affect their ability to use the channel at all.
The Regulatory Layer Worth Understanding
Several frameworks govern SMS to patients, and each has its own requirements.
The Telephone Consumer Protection Act, commonly known as the TCPA, requires prior express written consent for marketing-related text messages and prior express consent for informational text messages that use automated dialing systems. The distinction between marketing and informational matters, and the consent requirements differ. Most healthcare practice SMS sits in mixed territory that benefits from being treated as marketing for consent purposes regardless of how the practice would categorize it.
HIPAA, addressed extensively elsewhere in this content series, applies to SMS that includes identifiable patient information sent to or from the practice. SMS involving patient identifiers, treatment information, or scheduling details requires the same BAA-covered infrastructure considerations that apply to other patient communications.
State-level rules vary. Some states impose additional consent or disclosure requirements on SMS to residents. Practices operating in multiple states or with patients who may receive messages while in different states need to consider the strictest applicable rules.
Carrier policies are enforced at the network level. Carriers actively filter SMS traffic based on signals about whether messages appear to be wanted or unwanted, and accounts that generate complaints or spam-detection signals can be throttled or blocked entirely. The carrier layer is often invisible to practices until enforcement happens.
Consent Capture That Works
Effective consent capture for SMS communications has several specific elements.
Explicit opt-in language at the form level, separate from any general marketing consent. A checkbox specifically referencing SMS communications, the type of messages the patient will receive, the practice as the sender, and a notice that message and data rates may apply.
Affirmative consent rather than pre-checked default. The patient must actively opt in. Pre-checked boxes that the patient must uncheck to decline have been found inadequate in TCPA enforcement and litigation.
Records of consent retained in a way that proves which patient consented to what, when, and through what form. If a complaint arises, the practice must be able to demonstrate the consent record.
Easy opt-out at any time. The standard STOP keyword should always work, and the platform should respect opt-outs immediately and permanently. A patient who has opted out should not receive subsequent messages from any workflow.
Consent renewal where appropriate. Some interpretations of consent durability suggest that long-dormant relationships may require renewed consent before resuming SMS communications. Practices uncertain about the durability of older consent should consider a re-opt-in approach for dormant patients.
Message Categories Worth Distinguishing
Different categories of SMS have different operational considerations.
Transactional and operational messages — appointment confirmations, reminders, schedule changes, post-visit instructions — are generally well-received and produce measurable benefits in show rates and patient experience. These tend to fall into the informational rather than marketing category, with somewhat different consent considerations.
Acknowledgment messages — “we received your inquiry, someone will call you shortly” — are time-critical and produce the speed-to-contact benefits addressed elsewhere in this cluster. These messages tend to be exempt from some restrictions when they are direct responses to the patient’s own action, but the platform sending them still needs appropriate infrastructure.
Marketing-style nurture and promotional messages — special offers, service highlights, seasonal campaigns — are subject to the strictest consent and content requirements. These messages should be used cautiously in healthcare contexts and should always operate on explicit, well-documented marketing consent.
Reactivation and re-engagement messages to dormant patients — addressed more fully in a separate article in this cluster — sit in a particularly sensitive category. The consent that may have existed when the patient was active is often unclear after long dormancy, and these campaigns benefit from explicit re-opt-in approaches.
Timing and Frequency
Beyond what messages contain, when and how often they arrive matters significantly.
SMS sent outside reasonable hours produces complaints regardless of content. Most practices should configure their automation to send messages only between defined business-day hours, with time-zone awareness if patients span multiple zones. Even technically permitted overnight messages produce patient frustration.
Frequency should be conservative. Healthcare patients tolerate a meaningfully lower frequency of SMS than they tolerate from consumer brands. A welcome message, an appointment confirmation, a reminder sequence, and occasional follow-ups fit most patients’ tolerance. Daily or even multiple-weekly messages typically do not.
Different patients tolerate different volumes. Offering frequency preferences — allowing patients to opt down rather than only opt out — preserves the relationship with patients who would otherwise unsubscribe entirely.
Message Design
The content of SMS messages benefits from several specific design principles.
Brevity. SMS messages should communicate one thing clearly in as few words as possible. Long messages get truncated by some carriers, get ignored by patients, and feel intrusive even when technically delivered.
Clear sender identification. The patient should know which practice is messaging them from the first line. Generic openings that could come from any business produce confusion and complaints.
Specific next steps where applicable. “Reply YES to confirm,” “call us at this number,” “click this link to schedule” — clear, specific actions work better than vague invitations.
No protected health information in the message itself. SMS is not a secure channel. Even when the platform sending it operates under appropriate coverage, the message resides on the patient’s phone and may be visible on lock screens, shared devices, or in screenshots. Specific clinical information should not appear in SMS content, even when the messaging is otherwise compliant.
Required disclosures where applicable. Marketing SMS in many configurations should include opt-out instructions, message-and-data-rate notices, and identification of the sender. The exact required disclosures depend on the consent flow and message type, and practices benefit from reviewing the specific requirements with counsel.
What Effective SMS Workflows Look Like
Healthcare SMS workflows that produce real conversion benefits tend to share a few characteristics.
Speed where it matters. New lead acknowledgment within seconds, appointment confirmations immediately after booking, reminders at the points where patients are most likely to forget. The right message at the right moment is dramatically more effective than the right message a day late.
Restraint in volume. Workflows that send fewer, better-timed messages outperform workflows that send many. The temptation to fill every possible touchpoint with a message should be resisted.
Two-way design. Patients should be able to respond, and their responses should reach a human who can handle the conversation. SMS that operates as a one-way broadcast channel misses much of the value the medium offers.
Integration with the rest of the pipeline. SMS that exists in isolation, disconnected from the CRM and the calendar, produces administrative confusion and missed handoffs. SMS integrated with the broader patient pipeline produces operational coherence.
When Not to Use SMS
There are contexts where SMS is not the right channel even when it could technically be used.
Sensitive clinical communications belong in HIPAA-secure patient portals, not in SMS. Detailed clinical results, treatment recommendations, and other content requiring secure transmission should use appropriate channels.
Communications to patients who have not clearly consented or whose consent is uncertain should not happen via SMS until consent is established. The benefits of reach do not justify proceeding without consent.
Marketing-style outreach to dormant patients whose original consent may have lapsed should use a re-opt-in path before resuming routine messaging. The convenience of having the phone number on file does not equate to current consent to use it.
SMS used responsibly is one of the most effective channels in the modern patient pipeline. SMS used carelessly is one of the fastest ways to accumulate complaints, regulatory exposure, and carrier-level enforcement. The discipline that separates the two is the discipline of treating each message as a deliberate choice rather than an automated default.
