Can I text my caregivers about clients? Is that a HIPAA problem?
HIPAA does not ban texting, but it requires reasonable safeguards. Keep texts short, leave out names, diagnoses and full addresses where you can, use locked phones, and write a texting policy. Train staff on it. Ask your lawyer or compliance advisor to confirm your setup.
HIPAA does not say "never text." It asks you to protect client information with reasonable safeguards. Here is a careful way to think about it.
What the government pages say:
- On email, HHS says the Privacy Rule does not prohibit unencrypted email for treatment-related messages, but you should limit what you send and meet the Security Rule. I did not find a similar HHS page for texting, so treat this as a guide, not a ruling.
- HHS’s mobile device guidance says to include phones in your risk review, set a written policy for work use, require screen locks, apply updates, and train staff.
Simple habits that follow from that:
- Text schedule facts, not health details: "Visit moved to 2 pm."
- Use first name or initials, not full name and address, when you can.
- Never send photos of records, ID cards or Medicaid numbers by regular text.
- Require a screen lock on any phone used for work.
- Write a one-page texting policy and have each caregiver sign it.
Your state program or health plan may have stricter rules. Check with your compliance advisor.
Sources
- Does HIPAA permit health care providers to use email to discuss health issues with patients? (FAQ 570) · HHS Office for Civil Rights
- OCR Cybersecurity Newsletter, October 2017 (mobile devices) · HHS Office for Civil Rights
Reviewed by Beth Bledsoe, Care Business Advisor®, 28 Oct 2026. Rules change. Confirm with your state Medicaid agency before you act.
How CareBravo®’s Communication agent handles this
Want to see where this is costing your agency money? Four minutes, your agency’s name on the answer.