STOP and opt-out handling for patient texts

What the FCC rules require

The FCC updated its TCPA consent rules in a 2024 order that took effect on April 11, 2025. The key provisions, in 47 CFR 64.1200(a)(10), are:

• Any reasonable means. A person may revoke consent using any reasonable method that clearly expresses a desire not to receive further calls or texts. Callers cannot require a specific form or channel.
• Keywords count. A text reply of "stop," "quit," "end," "revoke," "opt out," "cancel" or "unsubscribe" is treated as a valid revocation.
• Ten business days, at most. Revocations must be honored within a reasonable time, not to exceed ten business days.
• One confirmation allowed. Under 64.1200(a)(12), a single confirmation text with no marketing does not violate the rules, and one sent within five minutes of the request is presumed to be within the person's prior consent.

Healthcare messages have a stricter clock

Practices that rely on the FCC's healthcare exemption for appointment reminders, in 47 CFR 64.1200(a)(9)(iv), take on an extra condition: every message must include an easy way to opt out, and opt-out requests must be honored immediately. The ten-business-day ceiling is the general rule. For healthcare reminders, plan to stop right away.

Carrier standards point the same way. The CTIA Messaging Principles and Best Practices expect senders to support STOP and similar keywords, send one final confirmation, and then send nothing more on that program. Automated systems can meet that standard in seconds. There is no reason a patient who texts STOP should ever receive another reminder.

What STOP should stop, now and after January 2027

The 2024 order also included a "revoke-all" rule: an opt-out in response to one type of message would apply to all of a caller's robocalls and robotexts, including on unrelated matters. The FCC has delayed that provision twice. Its effective date is now January 31, 2027, and the Commission is considering whether to modify it.

Until then, a STOP reply to a reminder clearly covers reminders. Whether it also covers, say, billing texts is less settled. The simplest and safest design is to treat STOP as stopping all automated texts from your practice to that number, and to reach the patient by phone or mail if something important comes up. That design is already compliant with the revoke-all rule if it takes effect.

Handling replies that are not keywords

Patients rarely reply with a perfect keyword. Because revocation can be made by any reasonable means, you need a plan for messages like these:

• "Please stop texting me" or "take me off your list": treat as an opt-out.
• "Wrong number" or "who is this?": stop texting that number, flag the record and have staff verify the patient's correct number by phone.
• "Stop" combined with other words, such as "stop, I already confirmed": when in doubt, treat it as an opt-out, then let staff call to clarify.
• Angry or profane replies: treat as an opt-out. Nobody who writes that wants more texts.
• "Stop for now, I'm traveling": treat as an opt-out and note the context so staff can ask about resuming at the next visit.

Sample confirmation and help messages

Keep the confirmation short, neutral and free of anything promotional. Send it once.

Opt-out confirmation: "[Practice Name]: you won't receive more texts from us. Call [phone] if you need us. Reply START to resume."

HELP reply: "[Practice Name] appointment texts. Call [phone] for help. Msg frequency varies. Reply STOP to opt out."

Opt back in: "[Practice Name]: texts are back on. Reply STOP anytime to opt out." Send this only after the patient texts START or gives new consent that you record.

Building a process that never leaks

Most opt-out failures are not about the rules. They come from a practice running more than one system. Use this checklist to close the gaps:

1. One suppression list. Every tool that texts patients should read from and write to the same opt-out record, or sync with it at least daily.
2. Every channel feeds it. When a patient says "no more texts" at the front desk, on a phone call or by email, staff record it the same day in the same place.
3. Match on the number. Opt-outs attach to the phone number, not just the patient. A parent's number used for three children should be suppressed for all three.
4. Keep the history. Record the date, the channel and the words used. If a dispute ever comes up, that log is your evidence.
5. Test it. Once a quarter, opt out a staff test number and confirm every system stops within minutes.
6. Mind state laws. Florida's telephone solicitation law, for example, requires a person to reply STOP and allows the sender 15 days to cease before a lawsuit over text solicitations. Treat that as a floor, not a target.