Executive Summary
Therapy practices use SMS for appointment reminders, intake links, and occasional office updates. On US local numbers via practice management software, that is A2P 10DLC traffic requiring Brand and Campaign registration. Clinical sensitivity demands minimal necessary content in texts, strong access controls, and clear separation from marketing. HIPAA and state privacy duties may apply alongside TCPA and carrier rules—coordinate with healthcare counsel; this article focuses on 10DLC packaging and consent hygiene.
Short answer: Register Brand + Campaign for reminder/care texts; keep message content non-sensitive; obtain appropriate consent at intake; do not bolt therapy promo blasts onto reminder consent without PEWC analysis.
Who This Is For / Who It Is Not For
Who this is for
- Solo therapists and group practices
- Behavioral health clinics using scheduling SMS
- EHR/practice platforms onboarding clinician clients
Who this is not for
- Crisis-hotline short-code operators with specialized programs
- Non-SMS telehealth video-only stacks
Definitions
| Term | Practice meaning |
|---|---|
| Reminder SMS | Time/place logistics for appointments |
| Care notification | Office closure, telehealth link logistics |
| Marketing SMS | Promotional content—rare for many clinics; high scrutiny |
| Minimum necessary | Privacy principle—avoid diagnoses in SMS |
Use-Case Mapping
| Message | Campaign framing | Content rule |
|---|---|---|
| Appointment reminder | Customer Care / Account Notification | No diagnosis details |
| Telehealth join link | Customer Care | Authenticate appropriately |
| Card on file / billing | Account Notification | Avoid oversharing |
| Newsletter / workshop promo | Marketing | Separate PEWC |
Consent and Intake
Disclose SMS reminders during intake with purpose, rates, STOP/HELP. Marketing workshops need separate opt-in. Document consent in the EHR/PM system. Honor STOP even if it complicates reminder workflows—offer voice/email alternatives.
Sample Messages (Illustrative)
[Practice Name]: Reminder—appointment on [date] at [time]. Reply C to confirm, STOP to opt out, HELP for help. Msg & data rates may apply.
Avoid: diagnosis names, medication details, or “your depression follow-up” style content in SMS bodies.
Decision Framework
- Inventory SMS templates for PHI leakage.
- Choose 10DLC vs toll-free with privacy review.
- Register care-focused Campaign; add Marketing only if needed.
- Configure STOP with clinical ops fallback.
- Train staff never to text clinical details from personal phones for convenience.
Risk and Failure Modes
| Risk | Mitigation |
|---|---|
| PHI in SMS | Template review + BAAs with vendors |
| Personal phone workarounds | Policy ban + approved tools only |
| Marketing without PEWC | Separate opt-in or do not send |
| Shared family phones | Sensitive content policy |
Implementation Checklist
| Step | Owner | Artifact |
|---|---|---|
| PHI template audit | Privacy officer | Redlined templates |
| Brand/Campaign submit | Admin | IDs |
| BAA inventory | Privacy | Vendor list |
| STOP + clinic callback SOP | Ops | SOP |
| Staff attestation | Clinical director | Log |
How MyTCRPlus Can Help
Preflight packaging with MyTCRPlus tools. Tools do not provide HIPAA certification.
FAQ
Do therapists need 10DLC?
For US local A2P SMS, typically yes (or another approved sender path).
Can I include the reason for visit in reminders?
Generally avoid clinical details in SMS; keep logistics only—confirm with privacy counsel.
Is intake form consent enough?
For reminders if clearly disclosed; marketing needs stronger separate consent.
What about group practices with many clinicians?
Often one Brand under the practice entity; confirm number assignment model with CSP.
Key Takeaways
- Register 10DLC for practice SMS platforms.
- Minimize clinical content in texts.
- Separate marketing consent if used.
- Coordinate TCPA with HIPAA/state privacy counsel.
- Ban unmanaged personal-phone clinical SMS.
Worked example: a solo therapy practice
A licensed therapist in private practice wants to text appointment reminders and rescheduling links. Because the practice has an EIN, it registers a standard brand rather than a sole proprietor brand, with one low-volume campaign for reminders only. Clients opt in on the intake paperwork with wording that names the practice, describes reminder messages and includes frequency, fee, HELP and STOP language.
Templates never mention the type of therapy, the client's name beyond a first initial, or anything that would reveal that the recipient is in treatment: "Reminder: your appointment is Thursday at 3pm. Reply C to confirm or R to reschedule." The practice signs a business associate agreement with its texting vendor and sends no marketing by text at all, which keeps the program simple to register and defend.
Disclaimer
Informational only—not legal or medical privacy advice. Engage qualified healthcare counsel for HIPAA/state rules.