Blog · HIPAA email

Texting vs secure email vs portal messages

Patients want texts. HIPAA wants controls. Use SMS for logistics, and move anything clinical to email, forms, or a portal.

A reminder that says "Appointment tomorrow at 2" is usually fine. A reminder that says "Your biopsy results are in, here is what they mean" is not a texting problem. It is a channel problem.

A simple split

  • SMS or voice: dates, "reply Y to confirm," directions, "call the office."
  • HIPAA email or portal: results, records, medication changes, anything that names a condition.
  • Personalized forms: intake, consents, and requests you need structured and signed.

Stop the iMessage workaround

Staff text from personal phones because the official tool is slow. Give them a healthcare inbox and form links that work on mobile. HIPAA Companion email and forms exist so the convenient path is also the documented path.

Write the split on one page and tape it at the front desk. Update it if you add a patient portal so people are not inventing a fourth channel.