Texting Your Patients: The Consent Rules Aesthetic Practices Keep Missing

Most practices treat patient texting as a marketing question. In the United States it is also a legal one, and the exposure generally sits with the practice on whose behalf the message was sent rather than with the software that sent it.

Two different kinds of message

A transactional message — appointment confirmation, reminder, result of something the patient asked for — sits on different footing from a promotional one offering treatments or discounts. Many practices run both through the same system without distinguishing them, which is where problems start.

Follow-up after an unconverted consultation sits in an interesting middle ground, and how it is framed matters. A message providing information she asked about during her consultation reads differently from one offering her a discount to book.

Consent has to be captured, not assumed

A phone number given at the front desk is not automatically consent to receive marketing texts. Practical compliance means capturing consent explicitly, recording when and how it was obtained, and being able to produce that record later.

• Explicit consent language on intake forms and booking flows
• A timestamp and source for every consent record
• Separate treatment of transactional and promotional consent
• A defensible answer to 'when did this patient agree to this?'

Contact hours follow the patient, not you

Contact-hour restrictions apply in the recipient's time zone. For a practice with patients across state lines — increasingly common with weight-loss programmes and travelling patients — that means your system needs to know where each patient is, not just where you are.

Opt-out is immediate, permanent and cross-channel

An opt-out has to be honoured straight away and has to persist. The failure mode that causes real trouble is a patient who opts out of texts and continues receiving them from a different system, or who is re-added when a list is re-imported months later. Suppression has to be a permanent property of the record, not a flag on one campaign.

Automated voice is a harder question than text

Regulatory treatment of AI-generated voice under US telemarketing rules has been tightening, and the exposure around automated calls is materially greater than around text. For most aesthetic follow-up, text does the job well and keeps you on simpler ground — with escalation to a real person for the conversations that need a voice.

What to ask a vendor

Ask how consent is captured and stored, whether contact hours are enforced by recipient time zone, how opt-outs propagate, whether suppression persists across imports, and whether message templates have been reviewed. A vendor who has thought about this will answer specifically. One who says 'we're compliant' has not.

And then ask a lawyer

This is a genuinely complex area that varies by state and changes. Nothing written here is legal advice, and any practice automating patient contact at scale should have its actual workflows — not just its policy document — reviewed by counsel.