Using text messages to check in with patients

Texting is now the favored method of communication among consumers, with 81% indicating that they have subscribed to text messages from businesses or organizations. High engagement shows the potential effectiveness of using text messaging for therapy check-ins. 

Do therapy check-in text messages have to be HIPAA compliant?

Therapy check-in text messages generally need to be HIPAA compliant if they involve the transmission of protected health information (PHI). HIPAA regulations require any communication containing PHI, such as a patient's health status or treatment information, be secure and protected from unauthorized access. Therefore, therapists and healthcare providers must use secure methods for texting, such as encrypted messaging platforms, to ensure compliance with HIPAA regulations. This helps safeguard patient privacy and ensures that sensitive information is handled in accordance with legal standards.

See also: Understanding and implementing HIPAA rules

How often can healthcare providers send check-in messages?

The frequency of check-in messages sent by healthcare providers can vary widely depending on the type of care, the needs of the patient, and the protocols of the healthcare organization. Here are some general patterns:

• Primary care: Providers may send check-in messages following a recent visit, annually for routine follow-ups, or more frequently for patients with chronic conditions.
• Mental health services: Therapists and counselors might send weekly or bi-weekly check-in messages, especially for patients undergoing active treatment or those with higher needs.
• Post-surgical care: Providers often send daily or weekly check-in messages in the weeks following surgery to monitor recovery and address any complications.
• Chronic disease management: For conditions like diabetes or hypertension, providers may send check-in messages on a weekly or monthly basis to track symptoms and treatment adherence.
• Behavioral health programs: Providers might send daily or several times weekly messages to support behavioral changes, such as smoking cessation or weight loss programs.
• Specialist care: Depending on the condition, specialists may send messages at intervals aligned with treatment schedules or disease monitoring protocols.
• Preventive care: Annual reminders for vaccinations, screenings, or wellness check-ups.

Achieving HIPAA compliance

Achieving HIPAA compliance for therapy check-in text messages involves several key steps to ensure the security and confidentiality of patient information:

• Use of secure messaging platforms: Healthcare providers should use secure messaging platforms, such as Paubox Texting, that offer encryption. These platforms are designed to protect data from being accessed by unauthorized parties during transmission.
• Patient consent: Obtain explicit consent from patients before sending text messages. Inform patients about the nature of the messages, the type of information that will be communicated, and the security measures in place.
• Limit PHI in messages: Keep text messages brief and avoid including sensitive PHI. 
• Staff training: Ensure that all staff members are trained on HIPAA requirements and the importance of protecting patient information in all forms of communication, including text messages.
• Policies and procedures: Develop and implement clear policies and procedures for text messaging, including guidelines on what information can be shared via text, how to verify patient identity, and steps to take in case of a breach.
• Audit and monitor: Regularly audit and monitor the text messaging system to detect and address any potential security issues. Review logs of sent messages and ensure compliance with established policies.
• Business associate agreements (BAAs): Ensure that any third-party service providers involved in the text messaging process sign a BAA. 

Go deeper: The guide to HIPAA compliant text messaging

FAQs

What constitutes PHI in a text message?

PHI in a text message can include any information that identifies a patient and relates to their health condition, treatment, or payment for healthcare services. Examples include the patient's name, diagnosis, treatment details, and appointment reminders.

What should I do if a patient sends sensitive information via text?

If a patient sends sensitive information via text, respond by acknowledging receipt and directing them to a secure communication channel to discuss the details securely. Document the interaction appropriately.

How can I educate my patients about the security of text messaging?

Provide patients with information about the security measures in place for text messaging, including the use of encryption and the importance of keeping their devices secure. Offer educational materials and discuss any concerns they may have.