Texting Patients: TCPA Consent, 10DLC Registration, and Opt-Outs

Before your practice sends a single appointment text from its phone system, the message has to clear two independent gates. The first is legal: the FCC's rules implementing the Telephone Consumer Protection Act, codified at 47 CFR 64.1200, which govern autodialed calls and texts to wireless numbers. The second is commercial: 10DLC registration, a carrier program that decides whether your messages get delivered at all. Clearing one does not clear the other. A clinic can be fully compliant with the FCC's rules and still have every reminder silently filtered by the carrier because its number was never registered — and it can be beautifully registered and still be sending texts it has no legal basis to send.

Two gates, not one

The distinction matters because the two gates are enforced by completely different parties, and the penalties look nothing alike.

The failure mode on the right is the one practices actually notice first, and it is the one they most often misdiagnose. If your reminders stopped landing, the cause is usually registration or filtering — not the patient's phone.

The TCPA healthcare exemption

The FCC's rules generally prohibit autodialed or prerecorded calls — and, per the rules, the term call includes a text message, including an SMS message — to a wireless number without the prior express consent of the called party. But 47 CFR 64.1200(a)(9)(iv) carves out an exemption for calls made by, or on behalf of, healthcare providers, a category the rule describes as including hospitals, emergency care centers, medical physician or service offices, poison control centers, and other healthcare professionals.

The exemption is real, and it is narrow. It applies only if the call is not charged to the called person or counted against their plan limits on minutes or texts — and only if every one of the conditions below is satisfied.

The conditions you must all meet

Straight from 47 CFR 64.1200(a)(9)(iv), a healthcare provider's exempt voice calls and texts must satisfy all of the following:

1. Right number. Messages go only to the wireless telephone number provided by the patient. Not a number you bought, appended, or found.
2. Identify yourself. The message states the name and contact information of the healthcare provider. For voice calls, that disclosure comes at the beginning of the call.
3. Permitted purposes only. The rule lists them: appointment and exam confirmations and reminders, wellness checkups, hospital pre-registration instructions, pre-operative instructions, lab results, post-discharge follow-up intended to prevent readmission, prescription notifications, and home healthcare instructions.
4. No marketing, no money. No telemarketing, solicitation, or advertising — and, critically, no accounting, billing, debt-collection, or other financial content. The message must also comply with the HIPAA privacy rules.
5. Concise. Generally one minute or less for voice; 160 characters or less for text.
6. Frequency capped. Only one message per day per patient, up to a maximum of three voice calls or texts combined per week per patient.
7. Easy opt-out. Each message must offer an easy means to opt out. For texts, the message must inform recipients they may opt out by replying STOP.
8. Honor it immediately. Opt-out requests must be honored immediately.

Condition 4 is the one that quietly breaks most rollouts. A balance-due text is financial content. Bundling "your visit is Thursday at 9 and you have a $40 copay outstanding" into the reminder pushes the message outside the exemption. Keep clinical reminders and financial messages on separate consent paths.

Landlines are a separate paragraph

For residential lines, the parallel provision at 64.1200(a)(3)(v) allows a prerecorded healthcare message from a covered entity or business associate with no consent, subject to the same cap: no more than one call per day to each patient's residential line, up to three per week combined, and honoring opt-out requests.

What 10DLC registration is

10DLC stands for 10-digit long code — an ordinary local phone number used to send application-to-person (A2P) messages, as opposed to a short code or a person typing on a handset. When your VoIP platform sends appointment texts from your main office number, that is A2P traffic on a 10DLC.

US mobile carriers require that A2P traffic on these numbers be registered before it is delivered at scale. Registration is a two-layer process handled through a central registry, usually submitted by your VoIP provider on your behalf:

• Brand registration. Identifies the legal entity behind the messages — legal business name, EIN, address, website, and contact. The details must match your official records; mismatches are a common rejection cause.
• Campaign registration. Describes the specific messaging use case — what the messages say, how consumers opt in, sample message content, and the opt-out language. A clinic typically registers a low-volume mixed or account-notification campaign covering appointment reminders.

Carriers use registration status and vetting to decide how much of your traffic to accept and how aggressively to filter it. Unregistered or poorly registered A2P traffic is subject to filtering and blocking — and the sender usually receives no clear error. Fees and vetting requirements vary by provider and registry, so ask your vendor for their current schedule rather than assuming.

Opt-outs and revoking consent

The FCC's revocation rules are broader than most reminder platforms are configured to handle. Under 47 CFR 64.1200(a)(10), a called party may revoke consent using any reasonable method that clearly expresses a desire not to receive further calls or texts.

• Replying to a text with stop, quit, end, revoke, opt out, cancel, or unsubscribe is a reasonable means per se — consent is then definitively revoked.
• If a patient replies with different words, you must still treat it as a valid revocation if a reasonable person would understand those words to convey a request to revoke.
• Revocation requests made in any reasonable manner must be honored within a reasonable time not to exceed ten business days from receipt. (Under the healthcare exemption, opt-outs are to be honored immediately.)
• You may not designate an exclusive means of revoking consent. A message that says "you can only opt out through the patient portal" is not compliant.
• If your texting protocol does not accept reply texts, each message must clearly and conspicuously disclose that two-way texting is unavailable and give reasonable alternative ways to revoke.

One confirmation text is permitted: under 64.1200(a)(12), a single message confirming the revocation does not violate the rules, so long as it only confirms the request, carries no marketing, and is the only additional message sent. Sent within five minutes of receipt, it is presumed to fall within the consumer's prior consent.

Where clinics get this wrong

• Opt-outs that die in the platform. A patient replies STOP to the reminder system, but the scheduling software still has them flagged for texts, and the next confirmation goes out anyway. The revocation must propagate to every system that can originate a message.
• Recall campaigns dressed as reminders. "You are due for your annual — book now" sent to a lapsed patient list is closer to solicitation than to an appointment confirmation. Treat it as a different consent question.
• Content that is too rich. The exemption requires compliance with HIPAA privacy rules and caps messages at 160 characters. Diagnoses, test details, and provider specialties do not belong in an unsecured SMS.
• Numbers from the wrong place. Appended or purchased mobile numbers are not "provided by the patient."
• Silent registration failure. Nobody notices the campaign was rejected until no-shows spike a month later.

A pre-launch checklist

1. Confirm the brand and campaign are registered and approved — and put a named owner on renewing them.
2. Capture the mobile number from the patient, in a field, with a timestamp, and record how it was obtained.
3. Separate the message streams: clinical reminders in one campaign, any financial or billing message in a different one with its own consent basis.
4. Cap frequency in the platform, not in policy: one per day, three per week per patient, across voice and text combined.
5. Include the practice name and contact information in every message.
6. Test STOP end to end — and test a non-standard revocation such as "please stop texting me" — and confirm both suppress the next scheduled send in every system.
7. Log every opt-out with a timestamp, and keep the log.
8. Re-run the whole test after any phone-system, EHR, or reminder-platform upgrade.

Texting is the highest-yield tool the front office has for cutting no-shows. It is also the one most likely to be running quietly out of compliance, because nothing visibly breaks when it is. Ten minutes with the rule text and one honest test message is the whole cost of getting it right.

Common questions

Do we need written consent to text appointment reminders?

Not if the message fits the FCC's healthcare exemption in 47 CFR 64.1200(a)(9)(iv) — which requires, among other conditions, that the text go only to a wireless number the patient provided, carry no marketing or billing content, stay within the frequency caps, and offer an immediate opt-out. If any condition fails, you are back to needing prior express consent.

Can we include a balance due in the appointment reminder?

Not inside the healthcare exemption. The rule states that exempt voice calls and text messages may not include accounting, billing, debt-collection, or other financial content. Send billing messages on a separate consent basis.

What counts as a valid opt-out?

Any reasonable method. Replying stop, quit, end, revoke, opt out, cancel, or unsubscribe is per se reasonable, but other wording counts too if a reasonable person would understand it as a revocation. You may not designate an exclusive opt-out channel.

Why did our texts stop being delivered?

Most often, 10DLC registration — an unapproved, lapsed, or mismatched brand or campaign gets filtered by the carriers, usually with no visible error. Check registration status with your provider before assuming it is a patient-side or handset problem.

Common questions

Do we need written consent to text appointment reminders?

Not if the message fits the FCC's healthcare exemption in 47 CFR 64.1200(a)(9)(iv), which requires that the text go only to a wireless number the patient provided, carry no marketing or billing content, stay within the frequency caps (one per day, three per week), and offer an immediate opt-out. If any condition fails, you are back to needing prior express consent.

Can we include a balance due in the appointment reminder?

Not inside the healthcare exemption. The rule states that exempt voice calls and text messages may not include accounting, billing, debt-collection, or other financial content. Send billing messages on a separate consent basis.

What counts as a valid opt-out?

Any reasonable method. Replying stop, quit, end, revoke, opt out, cancel, or unsubscribe is a reasonable means per se, but other wording counts if a reasonable person would understand it as a revocation. You may not designate an exclusive opt-out channel.

Why did our appointment texts stop being delivered?

Most often it is 10DLC registration. An unapproved, lapsed, or mismatched brand or campaign gets filtered by the mobile carriers, usually with no visible error returned to the sender. Check registration status with your provider before assuming it is a handset problem.