Yes—automated appointment reminders are allowed. HIPAA treats reminding patients about appointments as part of treatment and running a practice, so you don't need special authorization to send them. And before you spend anything: your EHR probably has reminders built in, which makes the honest starting price $0. Custom automation, when the built-in tool genuinely falls short, runs $2,500–$5,000 in our pricing.
That's the summary. The details—what a reminder may say, the second law everyone forgets, and where custom work actually earns its price—are below.
What is a reminder allowed to say?
HHS says providers may leave appointment messages, but must limit what they disclose. The working rule is minimum necessary: patient name, appointment date and time, practice name, callback number. Not the reason for the visit, not results, not medication names. For a psychiatry or fertility practice, even the specialty in the caller ID is worth a thought—a text from "the office of Dr. Smith" reveals less than one naming the clinic.
The same discipline applies to voicemail, which anyone near the phone might hear, and to text previews, which sit on lock screens. Good automation is conservative by default; the details live behind a phone call or the portal.
The other law to respect: the TCPA
HIPAA isn't the only rule in the room. The Telephone Consumer Protection Act restricts autodialed and prerecorded calls and texts to cell phones without the recipient's consent. For a practice, that consent is easier than it sounds. The FCC has said that a patient giving you their number counts as consent to healthcare calls and texts at that number, as long as the messages stay within what the patient would expect and they haven't told you otherwise. Appointment reminders also get their own carve-out: a reminder that's free to the patient, names the practice, carries no marketing or billing, and runs at most one a day and three a week needs no separate consent at all.
Two practical habits keep you on the right side regardless—and since a 2025 Supreme Court decision left courts free to read the law differently from the FCC, they matter more than they used to: put plain language on your intake forms saying the number will be used for reminders, and honor a "STOP" reply immediately and automatically. The FCC's 2025 rules treat "stop" and similar words as a definitive opt-out.
None of this is exotic. Reminder vendors and EHR features handle opt-outs as standard behavior. It only goes wrong when a practice wires something up ad hoc—which is an argument for doing this deliberately once, not improvising.
A caveat that belongs on all of this: I'm not a lawyer, and this isn't legal advice. HIPAA and the TCPA both carry real penalties, so make sure talking to your counsel—and coming up with a plan they're satisfied with—is part of any reminder project, whether you build something custom or switch on what your EHR already has.
Turn on the built-in version first
Here's the part of this guide that argues against hiring us: many EHRs—DrChrono and ModMed among the systems we've worked inside—include appointment reminders. If yours does, turning it on is an afternoon, it's likely already covered by your existing agreement with the vendor, and it may cost nothing beyond your current subscription. Do that first. A practice paying for custom reminders it could have switched on for free bought the wrong thing.
When custom automation earns its price
| Built-in EHR reminders | Custom automation | |
|---|---|---|
| Cost | Often included in your subscription | $2,500–$5,000, quoted fixed |
| Basic "you have an appointment Tuesday" | Yes | Yes |
| Two-way: confirm, cancel, reschedule by reply | Sometimes, and often rigid | Built around how your front desk actually works |
| Recalls: annuals, follow-ups, cleanings due | Rarely done well | The main reason to build |
| Filling a cancelled slot from a waitlist | Almost never | Yes—this is where the money is |
The pattern: built-ins remind, custom work recovers. A reminder stops a no-show; a recall brings back the patient who never rebooked; a waitlist message turns this morning's cancellation into a filled slot instead of a hole in the schedule. Those last two are revenue your current tools are leaving on the table, and they're the honest test of whether an automation project is worth it—count your empty slots and unreturned recalls for a month, then do the arithmetic against a one-time $2,500–$5,000.
One boundary we build in from the start: reminders and scheduling are administrative, and automation should stay on that side of the line. Anything clinical routes to your staff—the same rule we apply to patient-facing chatbots.
What a good setup looks like
A reminder flow that actually reduces no-shows is boring and reliable: a message a few days ahead plus one the day before (the common pattern, and a reasonable default), replies that update the schedule without the front desk retyping anything, opt-outs honored automatically, and every vendor that touches patient information covered by a Business Associate Agreement. Nothing clever. The value is in it running every day without anyone remembering to do it.
That's the shape of most of our front-office automation work for practices: find the repetitive thing bleeding money, automate exactly that, keep patient data handled the way the law expects. If you're not sure whether your EHR's built-in tool is enough, our AI and automation service starts with a free conversation—and "turn on what you already pay for" is a real possible answer.