Email vs text for patient messages
Practices tend to pick one channel and push everything through it. That is usually a mistake. Text and email have different strengths, different privacy profiles and different laws attached, and the right choice depends on the message. This guide sorts common patient messages into the channel that fits. It is general information, not legal advice.
- Text wins on speed and attention, which matters for time-sensitive messages like reminders and same-day openings.
- Email and patient portals win on length and detail, which matters for instructions, forms and anything sensitive.
- Texts are governed by the TCPA and carrier rules; commercial email is governed by CAN-SPAM. HIPAA applies to both.
- Match the channel to the job: short and urgent goes by text, long or sensitive goes by email or portal, and the patient's stated preference beats both.
How the two channels really differ
On paper both are just electronic messages. In a patient's life they behave very differently.
- Attention. A text arrives with a buzz and sits at the top of the screen. An email joins an inbox full of newsletters and receipts. For anything that needs a reply today, text is the stronger channel.
- Length. A single text segment holds 160 standard characters. The FCC's healthcare exemption under the TCPA even expects reminder texts to stay at about that length. Email has no practical limit.
- Replies. Texts invite short replies: 1, 2, YES, STOP. Email invites paragraphs, which someone on your staff then has to read and answer.
- Privacy in transit. Standard SMS is not end-to-end encrypted. Email between servers is often protected with TLS, but that depends on both sides supporting it, so ordinary email is not guaranteed to be encrypted either. A secure patient portal is the most protected of the three.
- Visibility to others. Texts appear on lock screens, watches and car displays. Email previews do too, but less prominently.
What HIPAA says about each
HIPAA treats both channels the same way: you may use them with patients if you apply reasonable safeguards. In its FAQ on email, the HHS Office for Civil Rights gives examples such as checking the address before sending and limiting the type or amount of information included.
Patients get a vote. Under 45 CFR 164.522(b), providers must accommodate reasonable requests to communicate by alternative means. If a patient asks for email instead of texts, or the reverse, record it and follow it.
Whichever channel you choose, the vendor that sends and stores the messages for you, whether an email platform or a texting platform, is a business associate and needs a signed BAA.
The other laws: TCPA for texts, CAN-SPAM for email
Texts fall under the Telephone Consumer Protection Act, which requires prior express consent for automated texts to cell phones and carries statutory damages of $500 per violation, up to $1,500 if willful. The FCC treats a patient's number given to a provider as consent for healthcare messages within that scope, and the 2024 revocation rules require opt-outs to be honored quickly. Several states add their own telemarketing rules for promotional texts.
Email does not fall under the TCPA. Commercial email is governed by the federal CAN-SPAM Act, enforced by the FTC. CAN-SPAM's main requirements, such as an unsubscribe mechanism and a physical address, apply to commercial messages whose primary purpose is promoting a product or service. According to the FTC's compliance guide, transactional or relationship messages, a category that covers messages about an existing relationship, are exempt from most of those requirements, though they still may not contain false or misleading routing information.
The practical upshot: promotional content carries more legal weight on either channel. Keep reminders and promotions separate.
Which channel for which message
Here is a starting point most independent practices can adapt:
- Appointment reminders and confirmations: text. Short, time-sensitive and easy to answer with a number.
- Same-day or next-day openings: text. Speed is everything; an opening offered by email at 8 AM may be read at 9 PM.
- Missed-call follow-up: text. The patient just tried to reach you and is likely holding the phone. Confirm your consent basis covers it, especially for callers who are not yet patients.
- Overdue-visit invitations: text for the invitation, with a simple reply to book; email as a backup for patients without a mobile number.
- Pre-visit forms and detailed instructions: email or portal. They are long and need a link and a document.
- Statements and billing: email or portal. Billing content is outside the FCC's healthcare exemption for texts and is better handled where patients can see details.
- Results and clinical information: portal or phone call. Neither plain email nor SMS is the right home for clinical detail.
- Newsletters and promotions: email, with consent and a working unsubscribe.
Using both without overwhelming patients
The best programs coordinate channels instead of duplicating them. A few rules keep that manageable:
One message, one channel. Do not send the same reminder by text and email unless the first goes unanswered.
Escalate, don't repeat. If a text gets no reply, the next step is a call from staff, not three more texts. The FCC's healthcare exemption caps exempt messages at one per day and three per week per patient.
Respect channel-specific opt-outs. A patient who unsubscribes from email newsletters has not necessarily opted out of appointment texts, and vice versa. Track each separately, and when in doubt, ask.
Keep content consistent. If an email includes a link to reschedule, make sure the text offers an equally easy reply option, so patients are not punished for the channel they use.
A quick decision rule for staff
- Does the patient have a stated preference on file? Use it.
- Is the message urgent and short enough to fit in about 160 characters without clinical detail? Text.
- Is it long, includes documents, or contains sensitive or financial information? Email or portal.
- Is it clinical? Portal or phone.
- Is it promotional? Only on a channel where the patient has given consent for promotions.
DocsMD uses text where speed recovers revenue
DocsMD texts patients for the time-sensitive moments that decide whether a visit happens: missed calls, fresh cancellations, no-shows and overdue visits. Each text is minimum necessary, with the practice name, times and numbered choices and STOP honored every time. A Business Associate Agreement is signed before any data moves. See how DocsMD works.
Questions
Is email more HIPAA compliant than text?
Neither channel is compliant or noncompliant by itself. HIPAA asks for reasonable safeguards on both, plus a BAA with the vendor. Email suits longer or more detailed messages; a secure portal is the better home for clinical information.
Does the TCPA apply to email?
No. The TCPA covers calls and texts. Commercial email is regulated by the CAN-SPAM Act, and transactional or relationship messages are exempt from most of its requirements.
Should we send reminders by both email and text?
Usually one channel is enough. Use the patient's preference, default to text for time-sensitive reminders, and escalate to a staff call rather than piling on messages.
Can we text a billing reminder?
The FCC's healthcare exemption excludes billing and financial content, so billing texts need their own consent basis. Many practices keep billing to email, portal or mail. This article is general information, not legal advice.